Skip to content
OpenAdvisories

Vendor

Piwigo

18 known vulnerabilities.

Products

Piwigo 18
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-42322 Public exploit

    Piwigo: Authenticated RCE via File Upload in Logo Upload Feature

    Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/themes_standard_pages.php validates uploaded logo content by MIME type but reuses the attacker-controlled extension from std_pgs_logo when constructing the sto…

    Piwigo Piwigo