CVE-2026-28679 affects Home-Gallery.org versions prior to 1.21.0, allowing attackers to download sensitive system files due to improper validation of requested file paths during download operations. This vulnerability carries a high CVSS score of 8.6, indicating a critical risk with network-based attacks, low complexity, and high confidentiality impact. While there is no known active exploitation or publicly available exploit code, the vulnerability has garnered some community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.21.0CPE matchmatch criteria | cpe:2.3:a:home-gallery:homegallery:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.