Path Traversal in Coppermine Photo Gallery

CVE-2026-3013

Coppermine Photo Gallery in versions 1.6.09 through 1.6.27 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow to read content of any file accessible b…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.006 (68.5th percentile) — read the EPSS interpretation.