CVE-2026-3826 WellChoose｜IFTOP - Local File Inclusion
Unauthenticated attackers can exploit a Local File Inclusion flaw in IFTOP to execute arbitrary code on the server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-3826?
CVE-2026-3826 is a critical code injection vulnerability in WellChoose IFTOP, published on 11 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.
Weakness: CWE-98
Which versions are affected by CVE-2026-3826?
It affects 1 product.
Products include Wellchoose Organization Portal System.
How do I fix CVE-2026-3826?
No fix has been published for CVE-2026-3826 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-3826 being exploited?
There is no known exploitation of CVE-2026-3826 in the wild and no public exploit code.
Other vulnerabilities in WellChoose IFTOP
- CVE-2025-8913 WellChoose｜Organization Portal System - Local File Inclusion
- CVE-2025-8912 WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal
- CVE-2025-8909 WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal
- CVE-2025-8914 WellChoose｜Organization Portal System - SQL Injection
- CVE-2025-8910 WellChoose｜Organization Portal System - Reflected Cross-site Scripting
Sources
Also known as GHSA-3fg9-xp5j-324m.