HIGH

CVE-2026-77884

2026-09-14 CVSS v4.0

CVSS

7.1

Description

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage.

Weakness (CWE)

CWE-552

EPSS Score

0.32%

Probability of exploitation in next 30 days

25.2th percentile

References

https://fluidattacks.com/advisories/suicide https://play.google.com/store/apps/details?id=bt.photo.video.lock.album

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE