CVE-2026-77884 : 詳細

CVE-2026-77884

2026-09-14
19h17 +00:00
A01-Broken Access Control
2026-10-30
17h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-552 Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.

参考資料