Read the docs

Photoview

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Photoview records in CISA KEV

No Photoview vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-63833 CVE-2026-96673 · GHSA-2mp4-gjj5-8xj5

Photoview through 2.4.0 SQL Injection via album download route

Priority HIGH 77

Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the album_id path segment.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00541 Published 2026-09-23 Fixed CWE-89
TI-2026-63741 CVE-2026-96271 · GHSA-r72q-r5vm-p79c

Photoview through 2.4.0 Authorization Bypass via shareAlbum

Priority LOW 31

Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows authenticated users to create share links for albums owned by other users.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00387 Published 2026-09-23 No fix listed CWE-639
Open these records in search →