piwigo piwigo

Name: piwigo piwigo
Brand: piwigo

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical2high3medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-27833US	—OT elevated	1.64% (76th)	—	no fix	2026-04-03	≤ < 16.3.0
CVE-2012-4526US	medium6.1	1.21% (68th)	—	no fix	2019-12-02	≤ 2.4.4
CVE-2012-4525US	medium6.1	1.21% (68th)	—	no fix	2019-12-02	≤ 2.4.3 and earlier
CVE-2025-62512US	medium5.3	0.83% (57th)	—	no fix	2026-02-24	≤ = 15.5.0
CVE-2026-27634US	critical9.8	0.65% (51st)	—	no fix	2026-04-03	≤ < 16.3.0
CVE-2026-35048US	—	0.58% (48th)	—	no fix	2026-07-20	≤ ≤ 16.3.0
CVE-2025-62406US	high8.8	0.43% (37th)	—	no fix	2025-11-18	≤ = 15.6.0
CVE-2026-27834US	—	0.37% (31st)	—	no fix	2026-04-03	≤ < 16.3.0
CVE-2026-27885US	—	0.36% (30th)	—	no fix	2026-04-03	≤ < 16.3.0
CVE-2024-48928US	high7.5OT elevated	0.30% (22nd)	—	15.0.0	2026-02-24	14.0.0, → 15.0.0

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-330Use of Insufficiently Random Values1 CVEs
CWE-640Weak Password Recovery Mechanism for Forgotten Password1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.