Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ConFix confix allows PHP Local File Inclusion.This issue affects ConFix: from n/a through <= 1.013.
CVE-2026-27990
NONE
EPSS 0.17%
Updated Mar 05, 2026
PHP
CVE Details
CVE ID
CVE-2026-27990
Published Date
Mar 05, 2026
Vendor
PHP
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.17%
Likelihood of exploitation in next 30 days
Percentile:
37.2th percentile (higher than 37.2% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory