CVE-2026-35562

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:08+00:00| seen| Telegram/C4IqkAaofmVuG0ts1zoVr23H-sEIs7UsuvOGOq7uR7BrNw 2026-04-03 23:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimv5c4aqd2o 2026-04-04 03:02:58+00:00| seen|...

CVE-2026-22664

creationtimestamp| type| source ---|---|--- 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 04:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mindxp3i4l2s 2026-06-17 05:37:07+00:00| seen|...

CVE-2026-31395

creationtimestamp| type| source ---|---|--- 2026-04-03 22:19:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116343095399596893 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-27634

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

EUVD-2026-18868

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

CVE-2026-27634

CVE-2026-27634 affects Piwigo prior to 16.3.0, where four date-filter parameters (f_min_date_available, f_max_date_available, f_min_date_created, f_max_date_created) in ws_std_image_sql_filter() are concatenated into SQL without escaping or type validation. This allows a pre-auth SQL injection th...

CVE-2026-27634 Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

CVE-2026-27634

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

CVE-2026-27634 Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

CVE-2026-27634 Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

GHSA-8PRR-286P-4W7J

creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...

GHSA-67JX-R9PV-98RJ

creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...

GHSA-GP5X-2V54-V2Q5

creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc...

CVE-2026-31404

creationtimestamp| type| source ---|---|--- 2026-04-03 16:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim43ex3js2i 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-31399

creationtimestamp| type| source ---|---|--- 2026-04-03 16:00:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim3pp62gd2j 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-08-03 05:51:36+00:00| seen...

CVE-2026-23136

creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:19+00:00| seen| Telegram/GirSXfYk6qmo0VkezaSMDEKvqn4iGVO7FR9G1cahi8frg 2026-05-07 14:35:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlbgryvtcx2q 2026-05-07 20:00:00+00:00| seen|...

CVE-2026-23139

creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:19+00:00| seen| Telegram/GirSXfYk6qmo0VkezaSMDEKvqn4iGVO7FR9G1cahi8frg 2026-05-07 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260508 2026-06-01 18:00:00+00:00| seen|...

CVE-2026-25773

creationtimestamp| type| source ---|---|--- 2026-04-03 14:40:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3milxakmfkh2t 2026-04-03 15:23:03+00:00| seen| Telegram/DMrtbPbyVuvJyzUNlrr2TA99ljgvsTw1ZTHgoXyjyFD12Ec 2026-04-03 15:23:07+00:00| published-proof-of-concept|...

CVE-2026-28703

creationtimestamp| type| source ---|---|--- 2026-04-03 12:54:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3milrcr5y3m2o 2026-04-03 13:19:05+00:00| seen| Telegram/YV8cS3UbatxDTGe0fjayhbeNknefcE-s36BQ9lt853A06hI...

CVE-2026-28815

creationtimestamp| type| source ---|---|--- 2026-04-03 04:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikulke5wj2d 2026-04-03 15:23:03+00:00| seen| Telegram/DMrtbPbyVuvJyzUNlrr2TA99ljgvsTw1ZTHgoXyjyFD12Ec 2026-04-04 07:00:31+00:00| seen|...