CVE-2026-3826Disclosure(wellchoose / organization_portal_system)

LOWCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.

wellchoose CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-98

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

organization_portal_system

Threat summary

Public PoC is present in monitored signal
6 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 6 signals
Disclosure: 5 classified signals
Discloirse: 1 classified signal
Peaked 1d ago at 5 mentions (2026-03-11); latest day: 1
6 total mentions across 2 days

Affected systems

Vendors

wellchoose

Products

organization_portal_system

Deep dive

Activity timeline6 mentions / 2d

Signal classification2 categories

Disclosure

583.3%

Discloirse

116.7%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-11	5	Discloirse1Disclosure4
2026-03-15	1	Disclosure1

Full discourse6 posts

Vulmon Vulnerability Feed@VulmonFeeds211d
Discloirse
CVE-2026-3826 Local File Inclusion in IFTOP Enabling Remote Code Execution via Unauthenticated Attack https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3826
Post summary
The post announces CVE-2026-3826 as a local file inclusion leading to remote code execution, but offers no PoC, exploit code, or patch information.
0001019
4.0K followersView on X
0day Signal@0dayPublishing212d
Disclosure
🚨 CVE-2026-3826: WellChoose｜IFTOP - Local File Inc... Unauthenticated RCE via LFI in network monitoring tool IFTOP - classic path traversal to code execution chain that screa... https://zerodaysignal.com/vulnerability/CVE-2026-3826 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
CVE-2026-3826 is disclosed as an unauthenticated remote code execution vulnerability in IFTOP, leveraging a local file inclusion and path traversal flaw.
0001096
142 followersView on X
CVE@CVEnew207d
Disclosure
CVE-2026-3826 IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server. https://www.cve.org/CVERecord?id=CVE-2026-3826
Post summary
The text announces CVE-2026-3826, an LFI flaw in IFTOP that enables unauthenticated remote code execution, with no evidence of exploitation, PoC, or patches .
00000159
56.7K followersView on X
The Hacker Wire@TheHackerWire211d
Disclosure
🔴 CVE-2026-3826 - Critical IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server. https://www.thehackerwire.com/vulnerability/CVE-2026-3826/ https://t.co/b1vce5e6us
Post summary
A new LFI vulnerability (CVE‑2026‑3826) in IFTOP is disclosed, allowing remote code execution, with technical details provided but no PoC, exploit code, or patch information.
0000029
134 followersView on X
CVEFind.com@CveFindCom212d
Disclosure
[CVE-2026-3826: CRITICAL] IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.#cve,CVE-2026-3826,#cybersecurity https://cvefind.com/CVE-2026-3826
Post summary
The post announces a new critical Local File Inclusion vulnerability (CVE-2026-3826) that permits remote code execution, but it provides no PoC, exploit code, or evidence of active exploitation.
0000042
600 followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash212d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3826 - WellChoose｜IFTOP - Local File Inclusion Intel Report: https://ift.tt/iapW3lu
Post summary
The alert announces CVE-2026-3826, a Local File Inclusion vulnerability in WellChoose, and links to an intel report, but provides no PoC, exploit, active exploitation, or patch details.
0000019
343 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	wellchoose	organization_portal_system	-	-	-

Explore more

Back to dashboard wellchoose CVEs organization_portal_system vulnerabilities

What researchers are saying

CVE-2026-3826

Vulmon Vulnerability Feed@VulmonFeedsDiscloirse

The post announces CVE-2026-3826 as a local file inclusion leading to remote code execution, but offers no PoC, exploit code, or patch information.

0day Signal@0dayPublishingDisclosure

CVE-2026-3826 is disclosed as an unauthenticated remote code execution vulnerability in IFTOP, leveraging a local file inclusion and path traversal flaw.

CVE@CVEnewDisclosure

The text announces CVE-2026-3826, an LFI flaw in IFTOP that enables unauthenticated remote code execution, with no evidence of exploitation, PoC, or patches .

The Hacker Wire@TheHackerWireDisclosure

A new LFI vulnerability (CVE‑2026‑3826) in IFTOP is disclosed, allowing remote code execution, with technical details provided but no PoC, exploit code, or patch information.

CVEFind.com@CveFindComDisclosure

The post announces a new critical Local File Inclusion vulnerability (CVE-2026-3826) that permits remote code execution, but it provides no PoC, exploit code, or evidence of active exploitation.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The alert announces CVE-2026-3826, a Local File Inclusion vulnerability in WellChoose, and links to an intel report, but provides no PoC, exploit, active exploitation, or patch details.