CVE-2026-111234
SimplePie through 1.9.0 Local File Read via file:// Redirect
CVSS Score
5.9
EPSS Score
0.0%
EPSS Percentile
0th
SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or autodiscovery links. Attackers can return a Location header or feed link pointing to a file:// path, causing file_get_contents() to read files accessible to the web server process.
| CWE | CWE-73 |
| Vendor | simplepie |
| Product | simplepie |
| Published | Oct 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for simplepie simplepie
Be the first to know when new medium vulnerabilities affecting simplepie simplepie are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
SimplePie / simplepie
0 ≤ 1.9.0
References
github.com: https://github.com/simplepie/simplepie/issues/968 github.com: https://github.com/simplepie/simplepie/pull/991 github.com: https://github.com/abraxas/pfsense-rss-file-redirect github.com: https://github.com/simplepie/simplepie/blob/76cccb1b2c5dcaf44f304c925ab30c0f48643992/src/File.php#L160-L176 github.com: https://github.com/simplepie/simplepie/blob/76cccb1b2c5dcaf44f304c925ab30c0f48643992/src/File.php#L289-L293 github.com: https://github.com/simplepie/simplepie/blob/76cccb1b2c5dcaf44f304c925ab30c0f48643992/src/HTTP/Psr18Client.php#L75-L157 github.com: https://github.com/simplepie/simplepie vulncheck.com: https://www.vulncheck.com/advisories/simplepie-through-1.9.0-local-file-read-via-file-redirect
Credits
Daniel Ziegenberg Abraxas Labs