Unauthenticated Access in Contest Gallery

Publication date: 2026-06-15

Last updated on: 2026-06-15

Assigner: Patchstack

Description

Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-15

Last Modified

2026-06-15

Generated

2026-07-06

AI Q&A

2026-06-16

EPSS Evaluated

2026-07-04

NVD

CVE-2026-42657

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1284	The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

Executive Summary

This vulnerability is an unauthenticated issue affecting Contest Gallery versions up to and including 28.1.7. It allows an attacker to perform certain actions without needing to authenticate.

Impact Analysis

The vulnerability has a CVSS v3.1 base score of 5.3, indicating a medium severity. It can be exploited remotely without authentication and requires low attack complexity. While it does not impact confidentiality or availability, it can impact integrity, meaning an attacker could potentially alter data or functionality.

Hi! I’m here to help you understand CVE-2026-42657. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70