CVE-2026-116263 | HaschekSolutions PictShare up to 3.7.1 File Upload src/inc/core.php architect race condition

October 25, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the file src/inc/core.php of the component File Upload. This manipulation causes race condition.

This vulnerability is handled as CVE-2026-116263. The attack can be initiated remotely. Additionally, an exploit exists.

It is advisable to upgrade the affected component.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More