CVE-2026-42322 | Piwigo up to 16.3.x Logo Upload themes_standard_pages.php std_pgs_logo unrestricted upload

September 25, 2026 Yanac

A vulnerability labeled as problematic has been found in Piwigo up to 16.3.x. This vulnerability affects unknown code of the file admin/themes_standard_pages.php of the component Logo Upload. Such manipulation of the argument std_pgs_logo leads to unrestricted upload.

This vulnerability is documented as CVE-2026-42322. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More