file-read 4 Command Injection Leads to Remote Code Execution | TheFallen Jul 1, 2026 Local File Inclusion via Language Cookie Leads to Arbitrary File Read | Flagged Jun 4, 2026 XXE Injection – Arbitrary File Disclosure via XML Import | Holloway May 13, 2026 XML External Entity (XXE) via Deck Import Feature | Tanuki May 6, 2026