CVE-2026-3013: Path Traversal in Coppermine Photo Gallery
Coppermine Photo Gallery in versions 1.6.09 through 1.6.27 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow to read content of any file accessible by the the web server process.This issue was fixed in version 1.6.28.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3013?
CVE-2026-3013 is classified as a medium severity vulnerability due to its potential to allow unauthorized file access.
How do I fix CVE-2026-3013?
To fix CVE-2026-3013, upgrade to Coppermine Photo Gallery version 1.6.28 or later.
What types of attacks are possible with CVE-2026-3013?
An unauthenticated remote attacker can exploit CVE-2026-3013 to read files on the server through path traversal.
Which versions of Coppermine Photo Gallery are affected by CVE-2026-3013?
CVE-2026-3013 affects Coppermine Photo Gallery versions 1.6.09 to 1.6.27.
Can CVE-2026-3013 be exploited without authentication?
Yes, CVE-2026-3013 can be exploited by unauthenticated attackers.