PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-82483 coppermine-gallery CVE debrief

The CVE-2026-82483 vulnerability was detected in Coppermine Photo Gallery up to version 1.6.28. This vulnerability impacts the Hidden Album Update Endpoint in the db_input.php file, allowing for cross-site scripting attacks. The attack can be launched remotely and has been publicly disclosed. Users should upgrade to version 1.6.29 to mitigate this issue. Affected users should review their deployments and plan for updates or mitigations. The CVE record was published on 2026-08-30T08:16:33.560Z and has not been modified since then. Limited evidence is available, primarily from official records indicating a vulnerability in Coppermine Photo Gallery up to 1.6.28.

Vendor
coppermine-gallery
Product
Coppermine Photo Gallery
CVSS
LOW 2
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-30
Original CVE updated
2026-08-30
Advisory published
2026-08-30
Advisory updated
2026-08-30

Who should care

Users of Coppermine Photo Gallery up to version 1.6.28 should be aware of this vulnerability and take steps to upgrade or mitigate the risk. Operators, administrators, and security teams responsible for managing and securing instances of Coppermine Photo Gallery are particularly impacted. They should review their environments, assess exposure, and implement recommended actions to minimize risk. This includes reviewing compensating controls, monitoring for suspicious activity, and tracking exceptions.

Technical summary

The Coppermine Photo Gallery software up to version 1.6.28 contains a vulnerability in the Hidden Album Update Endpoint within the db_input.php file, which allows for cross-site scripting attacks. The vulnerability has been publicly disclosed and can be exploited remotely. Upgrading to version 1.6.29 is recommended to mitigate this issue. Affected users should review their deployments and plan for updates or mitigations. The vulnerability has a low CVSS score, indicating limited exploitability.

Defensive priority

Low-priority defensive review recommended due to limited exploitability and low CVSS score.

Recommended defensive actions

  • Inventory and version checks for Coppermine Photo Gallery
  • Upgrade to version 1.6.29 or later if vulnerable
  • Monitor for suspicious activity on affected systems
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

Evidence is limited; primary official records indicate a vulnerability in Coppermine Photo Gallery up to 1.6.28, allowing for cross-site scripting via the Hidden Album Update Endpoint in db_input.php. Vendor remediation is available in version 1.6.29. Further verification is recommended to confirm affected deployments and assess potential impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-82483 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-82483

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-82483 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-82483

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.