Medium 4.6

A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the...

CVE-2026-116263 First seen on SecPulse Oct 26, 21:00

Affected packages

Ecosystem	Package	Affected	Fixed
HaschekSolutions	PictShare	—	—

Original description The description as published by the source.

A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the file src/inc/core.php of the component File Upload. This manipulation causes race condition. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit has been published and may be used. Upgrading to version 3.7.2 is sufficient to resolve this issue. Patch name: 6306e33da630c04ddff60703922c2ec7b7539452. It is advisable to upgrade the affected component. The vendor was contacted early about this disclosure.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 4.6; CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4: Low 1.2; CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Published: Oct 26, 2026
First seen on SecPulse: Oct 26, 21:00
GHSA: GHSA-jwmr-fj5j-6pj8
CWE: CWE-362

NVD GitHub Advisory

Tags(click for explanation)

Programming Languages

PHP

CWE

CWE-362

All

Hascheksolutions Pictshare

Detection sources

NIST National Vulnerability DatabaseOct 26, 22:41
GitHub Security Advisories (Global)Oct 26, 21:32
CVE.org (CVE Program・cvelistV5)Oct 26, 21:00