Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The application appends user-controlled input to the photos directory and attempts to prevent traversal by removing dot-dot sequences, but this protection can be bypassed using crafted directory patterns. An attacker can exploit this behavior to cause the application to enumerate and display image files from unintended filesystem locations that are readable by the web server, resulting in unintended information disclosure.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25869 Path Traversal in MiniGal Nano 0.3.5 and Prior via Directory Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25869
Post summary
The text announces a path traversal vulnerability (CVE‑2026‑25869) in MiniGal Nano 0.3.5 and earlier, highlighting the affected parameter but providing no PoC, exploit or patch details.
CVE-2026-25869 MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The application appends user-controlled input to the … https://www.cve.org/CVERecord?id=CVE-2026-25869
Post summary
The text announces CVE-2026-25869, a path traversal flaw in MiniGal Nano (v0.3.5 and earlier) affecting the dir parameter in index.php. No PoC, exploit, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | rybber | minigal_nano | - | - | - |