CVE-2026-62262

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

September 26, 2026

Last Seen

September 27, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in Piwigo and Zimbra Expose Users to Remote Attacks70.5

Two critical vulnerabilities, CVE-2026-62262 and CVE-2026-93643, have been disclosed affecting Piwigo and Zimbra software. CVE-2026-62262 allows unauthenticated SQL injection attacks on Piwigo versions 17.0.0beta1 and earlier, enabling attackers to extract sensitive database information. CVE-2026-93...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerabilities in Piwigo and Zimbra Expose Users to Remote Attacks

15h ago·3 sources

Related Articles (2)

CVE-2026-62262: Piwigo Unauthenticated SQL Injection Exposes Database Information TheHackerWire / 1d A crafted API request targeting the photo rating and search functionality allows remote attackers to extract sensitive database information or induce time-based delays, impacting data confidentiality and system availability. Telemetry Metric Intelligence Detail CVE Identifier CVE-2026-62262 CVSS Severity 9.1 CRITICAL Affected Target 17.0.0beta1 Vulnerability Class Security Vulnerability Exploit A

www.thehackerwire.com·15h ago

CVE-2026-93643 - Exploits & Severity

Related Entities

CVE-2026-93643 CVE-2026-93647 CVE-2026-92609