CVE-2026-113402— ArmorX Global Technology｜ArmorX Spam - Local File Inclusion
Quick assessment
Affected
ArmorX Global Technology ArmorX Spam
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ArmorX Global Technology 开发的 ArmorX Spam 存在本地文件包含漏洞。已认证的远程攻击者可利用路径遍历，诱使应用程序包含预期目录之外的 PHP 文件。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-113402
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ArmorX Global Technology｜ArmorX Spam - Local File Inclusion
Source: CVE Program / CVE List V5
Vulnerability Description
ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal to cause the application to include PHP files outside the intended directory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ArmorX Global Technology | ArmorX Spam | 0 ~ 8.15.2-3.282.133-1.90.061 | - |
|
II. Public POCs for CVE-2026-113402
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-113402
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-113402 (2)
IV. Related Vulnerabilities
Same weakness: CWE-98
-
CVE-2026-111829
WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusi -
CVE-2026-62858
YOURLS: Unauthenticated File Inclusion -
CVE-2026-104909
Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion v -
CVE-2026-103367
ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion vi -
CVE-2026-110284
LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local Fil
V. Comments for CVE-2026-113402
No comments yet