PT-2026-33632
CVE-2026-6574
·
Published
2026-04-19
·
Updated
2026-04-20
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
osuuu LightPicture versions prior to 1.2.3
Description
An issue exists in the API Upload Endpoint component involving the processing of the file '/public/install/lp.sql'. Remote manipulation of the
key argument can lead to the exposure of hard-coded credentials.Recommendations
Update to a version later than 1.2.2.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾