VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 3, 2026· Updated Apr 9, 2026

CVE-2026-27833

CVE-2026-27833

Description

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the pwg.history.search API method in Piwigo is registered without the admin_only option, allowing unauthenticated users to access the full browsing history of all gallery visitors. This issue has been patched in version 16.3.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Piwigo/Piwigo2 versions
    cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*range: <16.3.0
    • (no CPE)range: <16.3.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.