CVE-2026-94123

NextGEN Gallery versions up to 4.5.0 are vulnerable to an unauthenticated arbitrary file download, allowing attackers to exploit this flaw to access sensitive files on the server. This high-severity vulnerability poses a significant risk to web applications using the affected plugin, particularly those handling sensitive data or user uploads. Organizations utilizing NextGEN Gallery should prioritize immediate patching or mitigation strategies to safeguard against potential data breaches.