Local File Inclusion Vulnerability in ArmorX Spam by ArmorX Global Technology
CVE-2026-113402

7.1HIGH

Key Information:

Vendor
CVE Published:
20 October 2026

What is CVE-2026-113402?

ArmorX Spam, developed by ArmorX Global Technology, is susceptible to a Local File Inclusion vulnerability. This flaw allows authenticated remote attackers to exploit path traversal issues, enabling them to include PHP files from directories outside of the intended application directory. Such exploitation can lead to unauthorized access and execution of arbitrary scripts, posing significant risks to user data and application integrity.

Affected Version(s)

ArmorX Spam 0 < 8.15.2-3.282.133-1.90.061

References

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.