CVE-2026-113402: ArmorX Global Technology｜ArmorX Spam - Local File Inclusion
Published Oct 20, 2026
·Updated
ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal to cause the application to include PHP files outside the intended directory.
Affected Software
1 affected component
ArmorX Global Technology ArmorX Spam
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ArmorX Spamto a version that resolves this vulnerability.Fixed in 8.15.2-3.282.133-1.90.061
Event History
Oct 20, 2026
CVE Published
via MITRE·06:28 AM
Data Sourced
via MITRE·06:28 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to exploitation?
ArmorX Spam deployments that are remotely reachable and allow an attacker to authenticate with a low-privilege account are exposed. The attack does not require user interaction.
2
What is the expected security impact?
The vulnerability is rated high severity with high confidentiality impact. The supplied vector indicates no integrity or availability impact.