CVE-2026-48972 — Vulnerability intelligence

SeedProd LLC — SeedProd Pro

Published: 2026-05-27T13:20:06.474Z

CVSS

7.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeedProd LLC SeedProd Pro allows PHP Local File Inclusion. This issue affects SeedProd Pro: from n/a before 6.19.5.

Sources

• CVE-2026-48972
• Original advisory
• CVE-2026-48972