CVE-2016-4806: WEB2PY

High severity, CVSS 7.5. EPSS: 10.1% chance of exploitation in the next 30 days.

Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files.

Affected products

• WEB2PY WEB2PY: up to and including 2.14.5

Published 2017-01-11. Last modified 2026-06-17.