high7.5
CVE-2025-26137
Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=.
Impact
Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. An unauthenticated attacker can exploit this issue to read arbitrary system files by supplying a crafted file path, potentially exposing sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Systemic-Rm | Risk Value | through 2.8.0 |