OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-39785

CRITICAL · CVSS 9.3

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

Gmedia Photo Gallery versions up to 1.25.1 are vulnerable to an unauthenticated SQL injection, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive data. This critical vulnerability poses a significant risk to any organization using affected versions, particularly those managing user-generated content or sensitive information. Organizations utilizing Gmedia Photo Gallery should prioritize immediate patching or mitigation measures to safeguard their systems.

CVE
CVE-2026-39785
Severity
CRITICAL
CVSS
9.3
EPSS
N/A

Original NVD Description

Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.