File-Inclusion

ThinkPHP 5.0.24 File Inclusion Leading to Remote Code Execution (CVE-2025-63888) newCVE-2025-63888webCRITICAL 9.8Unverified2026-07-06Joomla Novarain Framework (nrframework) Unauthenticated Arbitrary File Inclusion — CVE-2026-21627 newCVE-2026-21627webCRITICAL 9.5Patched2026-07-05