CVE-2026-88857 | OrdaSoft Gallery Extension up to 6.2.6 Upload saveWatermark unrestricted upload

A vulnerability categorized as problematic has been discovered in OrdaSoft Gallery Extension up to 6.2.6. The impacted element is the function saveWatermark of the component Upload Handler. Executing a manipulation can lead to unrestricted upload.

This vulnerability is tracked as CVE-2026-88857. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More