PT-2026-4465 · Devsblink · Edublink Core

João Pedro S Alcântara + 1 · Publicado 2026-01-23 · Atualizado 2026-01-24 · CVE-2026-24635

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DevsBlink EduBlink Core versions through 2.0.7

Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local files within the application.

Recommendations Versions prior to or including 2.0.7 should be updated.

Correção

Enumeração de Fraquezas

CWE-98

Identificadores relacionados

CVE-2026-24635

Produtos afetados

Edublink Core

Referências · 5

• https://twitter.com/CVEnew/status/2015086227242856907 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2014727421375689085 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-24635 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/edublink-core/vulnerability/wordpress-edublink-core-plugin-2-0-7-local-file-inclusion-vulnerability?_s_id=cve · Nota
• https://t.me/CVEtracker/42848 · Publicação no Telegram