CVE-2026-112832

Published 22 October 2026 · tracked since 23 October 2026

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CozyThemes Rootblox rootblox allows PHP Local File Inclusion.This issue affects Rootblox: from n/a through 1.0.6.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-115356 MEDIUM 5.4
• CVE-2026-114654 MEDIUM 6.5
• CVE-2026-114644 MEDIUM 5.9
• CVE-2026-114645 MEDIUM 5.2
• CVE-2026-114612 CRITICAL 9.9
• CVE-2026-114613 HIGH 7.5
• CVE-2022-51026 CRITICAL 9.8
• CVE-2026-77156 MEDIUM 6.4
• CVE-2026-114609 MEDIUM 5.8
• CVE-2026-114610 MEDIUM 6.5

→ Open the live CVE board · all tools