CVE-2026-13765: Php Extract Lfi Overwritecve-2026-13765-php-extract-lfi-overwrite
Calling `extract()` on an array parameter can implicitly overwrite local variables, including the path variable used in a subsequent file inclusion. An attacker controlling the extracted array can override the inclusion path and achieve Local File Inclusion (LFI) or Remote Code Execution (RCE). Consider explicitly assigning variables, extracting with `EXTR_S
