CVE-2026-28151

Tonda versions prior to 2.6 are vulnerable to an unauthenticated Local File Inclusion (LFI) flaw, allowing attackers to access sensitive files on the server. This vulnerability poses a significant risk as it can lead to information disclosure and potential further exploitation of the system. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access to their file systems.