CVE-2026-66450

HighCVSS 8.1/10Last modified Aug 14, 2026

Description

Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-98

Affected software

No affected versions have been published.

Timeline

Published
Aug 13, 2026
Last modified
Aug 14, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-664516.5Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.CVE-2026-664526.5Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions.CVE-2026-664539.8Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.CVE-2026-664546.5Unauthenticated Broken Access Control in WP Social Avatar <= 1.5 versions.CVE-2026-664556.0Subscriber Broken Access Control in ReactPress <= 3.4.0 versions.CVE-2026-664566.5Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.CVE-2026-664577.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-managerCVE-2026-664589.3Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.CVE-2026-664596.5Unauthenticated Broken Access Control in AI for SEO <= 2.4.2 versions.CVE-2026-66466.4The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dt_default_button' shortcode in all versions up to, and iCVE-2026-664606.5Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.CVE-2026-664617.5Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce <= 1.0.5 versions.
CVE-2026-66450: High severity, CVSS 8.1 | Vulnix