Skip to content
Threat Feed
Subscribe

Product

PictShare (< 3.7.1)

1 brief RSS
high advisory

Information Disclosure and Unauthorized File Deletion in PictShare

PictShare versions prior to 3.7.1 are vulnerable to an unauthenticated information disclosure flaw in the API::info() endpoint, allowing attackers to retrieve sensitive metadata and delete arbitrary files.

PoC PictShare information-disclosure api-vulnerability cve-2026-104051
1t 1c updated