CVE-2026-3695

5.5 mediumEPSS 0.8%

Medium (5.5) in remyandrade modern image gallery app. EPSS 0.8% chance of exploitation in the next 30 days.

A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2026-03-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

remyandrade:modern_image_gallery_app

References

https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218
https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218#-detailed-proof-of-concept-poc
https://vuldb.com/?ctiid.349641
https://vuldb.com/?id.349641
https://vuldb.com/?submit.765591

Check your stack JSON