Security Advisory

CVE-2025-26137

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-18 00:00:00
Last updated 2025-03-25 17:12:25
Assigner mitre
State PUBLISHED

Description

Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. An unauthenticated attacker can exploit this issue to read arbitrary system files by supplying a crafted file path, potentially exposing sensitive information.