Skip to content
Threat Feed
Subscribe

Product

PictShare (>= 2.0.0 < 3.7.1)

1 brief RSS
low advisory

Unauthorized File Deletion in PictShare via Predictable Delete Codes

PictShare versions prior to 3.7.1 contain a vulnerability where insecure PRNG usage for delete_code generation allows unauthenticated attackers to delete arbitrary files from hosted instances.

PictShare web-application-vulnerability cve-2026-104356
1c