Security Advisory

CVE-2026-42028

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-08 15:54:48
Last updated 2026-05-08 17:05:04
Assigner GitHub_M
CVSS score 5.3
State PUBLISHED

Description

novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files outside the intended gallery root directory. This issue has been patched in version 2.1.1.