API Vulnerability in Piwigo Open Source Photo Gallery
CVE-2026-27833

7.5HIGH

Key Information:

Vendor: Piwigo
Status: Piwigo
Vendor: CVE Published:; 3 April 2026

What is CVE-2026-27833?

Earlier versions of Piwigo, an open-source photo gallery application, contain a vulnerability in the pwg.history.search API method that lacks the admin_only option. This flaw enables unauthenticated users to access sensitive browsing history data of all gallery visitors. The issue has been resolved in Piwigo version 16.3.0, which adds necessary security to prevent unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch