PT-2026-1969 · Unknown · Nextgen Download Gallery

Publicado 2026-01-08 · Atualizado 2026-01-08 · CVE-2026-0675

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions NextGEN Download Gallery versions through 1.6.2

Description The NextGEN Download Gallery software contains a flaw that could allow unauthorized retrieval of embedded sensitive data due to an exposure of sensitive system information to an unauthorized control sphere.

Recommendations Update NextGEN Download Gallery to a version later than 1.6.2.

Enumeração de Fraquezas

CWE-497

Identificadores relacionados

CVE-2026-0675

Produtos afetados

Nextgen Download Gallery

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-0675 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2009229311425892847 · Publicação no Twitter
• https://vdp.patchstack.com/database/Wordpress/Plugin/nextgen-download-gallery/vulnerability/wordpress-nextgen-download-gallery-plugin-1-6-2-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/2009201083290099712 · Publicação no Twitter
• https://t.me/CVEtracker/41705 · Publicação no Telegram