Vulnerability Description
Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage.
Related Weaknesses (CWE)
References
- https://fluidattacks.com/advisories/suicide
- https://play.google.com/store/apps/details?id=bt.photo.video.lock.album
- https://fluidattacks.com/advisories/suicide
FAQ
What is CVE-2026-77884?
CVE-2026-77884 is a documented vulnerability. Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from An...
How severe is CVE-2026-77884?
CVSS scoring is not yet available for CVE-2026-77884. Check NVD for updates.
Is there a patch for CVE-2026-77884?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.