CVE-2025-32146

Summary

CVE-2025-32146 is a filename manipulation vulnerability affecting the JoomSky JS Job Manager, specifically versions from n/a to 2.0.2. An attacker can exploit this PHP Remote File Inclusion (RFI) vulnerability by crafting malicious filename parameters for include or require statements. The vulnerability allows the attacker to include local files, potentially leading to sensitive data disclosure or arbitrary code execution. This issue underscores the importance of maintaining up-to-date software and implementing secure coding practices to prevent PHP RFI vulnerabilities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.