CVE Catalog

CVE-2026-39481

HighCVSS 7.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.45%

35th percentile - higher than 35% of all known CVEs

Summary

Modula Image Gallery versions up to 2.14.18 are vulnerable to PHP Object Injection, which may lead to unauthorized access to the system.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update Modula Image Gallery to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Author PHP Object Injection in Modula Image Gallery <= 2.14.18 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS