Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-77884

Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fluid Attacks

Description

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brain Trust Gallery - Private Photo Vault

Default version status: unaffected

  • 1.0.41affected

References