P
Vendor security profile
piwigo
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
12toplam CVE
Uncertain12 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
9.1
CVE-2026-42322Piwigo: Authenticated RCE via File Upload in Logo Upload Feature
Patch status unknownEPSS %1
7.2
CVE-2026-42324Piwigo: Second-Order SQL Injection
Patch status unknownEPSS %1
9.1
7.2
CVE-2026-42323Piwigo: SQL Injection in Batch Manager
Patch status unknownEPSS %0
7.2
7.2
CVE-2026-27885SQL injection in Piwigo
Patch verified Public Exploits:1EPSS %1
7.2
CVE-2026-27834SQL injection in Piwigo
Patch verified Public Exploits:1EPSS %1
7.5
CVE-2026-27833Missing authorization in Piwigo
Patch verified Public Exploits:2EPSS %2
9.8
CVE-2026-27634SQL injection in Piwigo
Patch verified Public Exploits:1EPSS %1