https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:38:59.750101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-27834 CVE-2026-27834 — Piwigo: SQL Injection in pwg.users.getList API Method via filter Parameter 2026-10-05T11:38:59.751078+00:00

Affected: Piwigo

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability exists in the pwg.users.getList Web Service API method. The filter parameter is directly concatenated into a SQL query without proper sanitization, allowing authenticated administrators to execute arbitrary SQL commands. This issue has been patched in version 16.3.0.