CVE-2026-102377

Summary

This flaw allows for PHP object injection, enabling attackers to execute arbitrary code on the server. It matters because it can lead to full server compromise.

Exploitability

Exploitation requires access to the affected photo gallery feature and knowledge of the vulnerability. It is moderately easy to exploit given the right conditions.

Blast radius

If exploited, the impact is high, as it can lead to full compromise of the server hosting the affected application.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.8.47 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.