Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ArkSigner Software and Hardware Inc.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00568·Published 2025-10-23·Fixed in v5.1.4CWE-829