CVE-2026-44642 | Piwigo up to 16.3.x functions_upgrade.php check_upgrade_access_rights privileges management

September 25, 2026 Yanac

A vulnerability described as critical has been identified in Piwigo up to 16.3.x. Impacted is the function check_upgrade_access_rights of the file admin/include/functions_upgrade.php. Executing a manipulation can lead to improper privilege management.

This vulnerability appears as CVE-2026-44642. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More