PULSE
LIVE0signals / 24h
ES
FEED
vulnKEV agrega CVE-2026-59822 — BerriAI / LiteLLMvulnKEV agrega CVE-2026-48710 — Kludex / StarlettevulnKEV agrega CVE-2026-49869 — Kestra / Kestra OSSvulnKEV agrega CVE-2026-82329 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-9586 — Sangoma / SwitchvoxvulnKEV agrega CVE-2026-83548 — SonicWall / SMA1000 AppliancesvulnKEV agrega CVE-2026-83549 — SonicWall / SMA1000 AppliancesvulnKEV agrega CVE-2026-82078 — PaperCut / NG/MFvulnKEV agrega CVE-2026-81578 — PaperCut / NG/MFvulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2026-59822 — BerriAI / LiteLLMvulnKEV agrega CVE-2026-48710 — Kludex / StarlettevulnKEV agrega CVE-2026-49869 — Kestra / Kestra OSSvulnKEV agrega CVE-2026-82329 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-9586 — Sangoma / SwitchvoxvulnKEV agrega CVE-2026-83548 — SonicWall / SMA1000 AppliancesvulnKEV agrega CVE-2026-83549 — SonicWall / SMA1000 AppliancesvulnKEV agrega CVE-2026-82078 — PaperCut / NG/MFvulnKEV agrega CVE-2026-81578 — PaperCut / NG/MFvulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / Libuser
← All CVEs
CVE WatchAug 24, 2026

CVE-2026-28151

Unauthenticated Local File Inclusion in Tonda < 2.6 versions.

CVSS

8.1

High

EPSS

0.3%

p20

KEV

—

Exploit Today

6

0-100

Published: Aug 24, 2026 · Last modified: Aug 24, 2026 · CWE-98

EPSS · 30d
0.3%EPSS · 30 days0.3%
2026-08-252026-09-02
Technical description

Unauthenticated Local File Inclusion in Tonda < 2.6 versions.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-325608.8 HIG
27.3%
——8Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions.9dCVE-2026-666718.1 HIG
20.3%
——6Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.10dCVE-2026-666708.1 HIG
20.3%
——6Unauthenticated Local File Inclusion in Måne <= 1.7 versions.10dCVE-2026-665879.8 CRI
20.4%
——6Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.10dCVE-2026-281528.1 HIG
20.3%
——6Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.10dCVE-2026-665866.6 MED
25.9%
——8Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.14d