P
Vendor security profile
piwigo
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical3
CISA KEV0
Public exploit13
Patch rate%36
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
4
0
0
0
1
7
0
CVE KEV
CVE severity distribution
14toplam CVE
Critical3 (21%)
High7 (50%)
Medium3 (21%)
Low1 (7%)
Patch and exploitation view
%36
Verified patch
%0
CISA KEV
%93
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
9.1
CVE-2026-42322Piwigo: Authenticated RCE via File Upload in Logo Upload Feature
Patch status unknownEPSS %1
7.2
CVE-2026-42324Piwigo: Second-Order SQL Injection
Patch status unknownEPSS %1
9.1
7.2
CVE-2026-42323Piwigo: SQL Injection in Batch Manager
Patch status unknownEPSS %0
7.2
7.2
CVE-2026-27885SQL injection in Piwigo
Patch verified Public Exploits:1EPSS %1
7.2
CVE-2026-27834SQL injection in Piwigo
Patch verified Public Exploits:1EPSS %1
7.5
CVE-2026-27833Missing authorization in Piwigo
Patch verified Public Exploits:2EPSS %2
9.8
CVE-2026-27634SQL injection in Piwigo
Patch verified Public Exploits:1EPSS %1