MetInfo CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH MetInfo CVE published 2026-10-22

CVE-2018-25439

MetInfo CMS versions before 6.1.1 contain a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. The vulnerability was first observed by the Shadowserver Foundation on 2023-10-14. Defenders should prioritize verifying exposure and assessing the feasibility of path traversal attacks. AI-assisted PatchSiren debrief based on t [truncated]