CVE-2024-48928 | Piwigo up to 14.x Configuration Parameter RAND random values

February 24, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Piwigo up to 14.x. Affected by this vulnerability is the function RAND of the component Configuration Parameter Handler. The manipulation results in insufficiently random values.

This vulnerability is reported as CVE-2024-48928. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More