CVE-2025-26986

Summary

CVE-2025-26986 is a critical vulnerability affecting the Pearl - Corporate Business theme for PHP. The issue stems from an improper control of filename for include/require statements, enabling PHP Local File Inclusion. attackers can exploit this vulnerability to execute arbitrary code on affected systems. This flaw poses a significant risk, as it can lead to serious security breaches. The vulnerability is present in all versions of Pearl - Corporate Business prior to 3.4.8. It is essential that users upgrade to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.