Veille CVE

Semaine du 19 octobre au 25 octobre 2026

2 CVE

  1. CVE-2026-112832 9.8 Critique

    CozyThemes Rootblox

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CozyThemes Rootblox rootblox allows PHP Local File Inclusion.This issue affects Rootblox: from n/a through 1.0.6.

  2. CVE-2026-111843 6.5 Moyenne

    CozyThemes Rootblox

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Rootblox rootblox allows Stored XSS.This issue affects Rootblox: from n/a through 1.0.7.