CVE-2025-69990

Critical · 9.1

CVSS

9.1

EPSS

0.5%

Published

Jan 13, 2026

CISA due date

—

The record

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be deleted.

Affected packages

Ecosystem	Package	Introduced	Fixed