CVE-2025-26137: Systemic-Rm Risk Value

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. An unauthenticated attacker can exploit this issue to read arbitrary system files by supplying a crafted file path, potentially exposing sensitive information.

Affected products

• Systemic-Rm Risk Value: up to and including 2.8.0

Published 2025-03-18. Last modified 2026-06-17.