Home / Vulnerability Intelligence / CVE-2026-3826

CVE-2026-3826 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: March 11, 2026

WellChoose IFTOP - Remote Code Execution

Published: March 11, 2026Updated: March 11, 2026Remote Exploitable

Overview

WellChoose IFTOP contains a local file inclusion vulnerability allowing unauthenticated remote attackers to execute arbitrary code on the server, exploit requires no special privileges.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 20.1%(Probability of exploitation in next 30 days)

Impact

Unauthenticated remote attackers can execute arbitrary code on the server, potentially leading to full system compromise.

Mitigation

Update to the latest version.

References

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 11, 2026

🔴 CVE-2026-3826 - Critical (9.8) IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3826/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-3826
Severity: Critical
CVSS Score: 9.8
Type: file_inclusion
Status: unconfirmed
EPSS: 20.1%
Social Posts: 1

CWE

CWE-98

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

20.1%Probability of exploitation in the next 30 days