CVE Intelligence

Novafacile vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Novafacile products: 1 record(s), with severity, exploitation and fixes.

Novagallery 1

Exploited only (KEV) →

CVE-2026-42028 Medium · 5.3 CWE-22 May 8, 2026
novaGallery: Unauthenticated Path Traversal in Album and Cached Image Routes Allows Reading Images Outside Gallery Root
novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files outside the intended gallery root directory. This issue has been patched in version 2.1.1.