CVE-2026-28570

Vavo Core versions up to 2.3.0 are vulnerable to unauthenticated local file inclusion, allowing attackers to access sensitive files on the server. This could lead to data exposure or further exploitation of the system. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and potential data breaches.