Security Advisory
CVE-2025-11023
9.8
CRITICAL
Vulnerability Description
Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows PHP Local File Inclusion.
This issue affects AcBakImzala: before v5.1.4.
Published Date
October 23, 2025
Official Source
NIST NVD Advisory