CVE-2026-48194: Kutethemes Dukamarket

High severity, CVSS 8.1.

Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

Affected products

• Kutethemes Dukamarket: up to and including 1.3.0

Published 2026-10-10. Last modified 2026-10-10.