CVE-2025-30868

Summary

CVE-2025-30868 is a new vulnerability affecting DynamicWebLab Team Manager. This issue, classified as a PHP Remote File Inclusion vulnerability, stems from a lack of proper control over the filename used in include/require statements within PHP programs. An attacker can exploit this weakness to include local files, putting the system at risk. The flaw can be found in versions of Team Manager ranging from n/a to 2.1.23. It is essential to apply the necessary patches to mitigate this vulnerability and prevent potential unauthorized access or data leakage.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.