Known vulnerabilities in Piwigo 17.0.0beta1

Vendor: Piwigo.org
Software: Piwigo
Version: 17.0.0beta1
Software CPE: cpe:2.3:a:piwigo_org:piwigo:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Piwigo version 17.0.0beta1 Piwigo 17.0.0beta1 is affected by 2 vulnerabilities: 1 high, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138406 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-62262
CWE-89 High
Public exploit available
No
- 20.07.2026 SB2026072017
#VU138391 - Unrestricted Upload of File with Dangerous Type
CVE-2026-42322
CWE-434 Low
Public exploit available
No
- 20.07.2026 SB2026072017