Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-11023 EUVD-2025-35679GHSA-44g9-2xgh-733j

Local File Inclusion in ArkSigner's AcBakImzala

Published Oct 23, 2025 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows PHP Local File Inclusion.

This issue affects AcBakImzala: before v5.1.4.

Affected products

VendorProductAffectedFixed
ArkSigner Software and Hardware AcBakImzala < v5.1.4 v5.1.4

References