A vulnerability described as critical has been identified in WellChoose IFTOP. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper control of filename for include/require statement in php program (‘php remote file inclusion’).
This vulnerability is tracked as CVE-2026-3826. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
