Race Condition Vulnerability in PictShare File Upload by HaschekSolutions
CVE-2026-116263

2.1LOW

Key Information:

Vendor: Hascheksolutions
Status: Pictshare
Vendor: CVE Published:; 26 October 2026

🔔 Create Hascheksolutions Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-116263?

A race condition has been identified in the File Upload component of HaschekSolutions PictShare, specifically in the architect function within src/inc/core.php. This vulnerability allows an attacker to manipulate the file upload process remotely, posing significant security risks. While exploiting this issue is complex, it has been made public, which increases the urgency for mitigation. Users of affected versions are advised to upgrade to version 3.7.2 to close this security gap. The vendor has been made aware of this vulnerability early in the disclosure process.

Affected Version(s)

PictShare 3.7.0

PictShare 3.7.1

PictShare 3.7.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-116263 - Proof of Concept