Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-104079— Envira Gallery Lite < 1.16.2 Missing Authorization via Gallery Conversion REST Endpoint

Quick assessment

Affected
Syed Balkhi Envira Gallery
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Envira Gallery Lite 1.16.2 之前的版本在其画廊转换 REST 端点中存在一个缺失授权验证的安全漏洞。该漏洞允许具有较低权限的已认证用户在未具备所需权限的情况下创建并发布 Envira 画廊，因为该端点仅检查源帖子的编辑权限，并使用硬编码的发布状态。此外，攻击者还可以提供任意的、由调用者控制的图片 ID，而无需进行所有权验证，从而利用其无权使用的附件发布未经授权的内容。

CVSS 4.3 · Medium

Possible ATT&CK Techniques 1 AI

T1078 · Valid Accounts
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-104079

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Envira Gallery Lite < 1.16.2 Missing Authorization via Gallery Conversion REST Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged authenticated users to create and publish Envira galleries without the required capabilities, because the endpoint only checks edit permissions on the source post and uses a hard-coded publish status. Attackers can also supply arbitrary caller-controlled image IDs without ownership verification to publish unauthorized content using attachments they are not authorized to use.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Syed Balkhi Envira Gallery 0 ~ 1.16.2 -

II. Public POCs for CVE-2026-104079

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-104079

请登录查看更多情报信息。

Other References for CVE-2026-104079 (3)

IV. Related Vulnerabilities

Same product: Envira Gallery
Same vendor: Syed Balkhi
Same weakness: CWE-862

V. Comments for CVE-2026-104079

No comments yet

Leave a comment