What is GHSA-2qp8-r85p-fw36?

GHSA-2qp8-r85p-fw36 is a security advisory published by GitHub Security Advisories with High severity. Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from...

Which CVE IDs does GHSA-2qp8-r85p-fw36 cover?

GHSA-2qp8-r85p-fw36 covers the following CVE IDs: CVE-2026-77884. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-2qp8-r85p-fw36High

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from...

Vendor

GitHub Security Advisories

Published

September 14, 2026

Last Modified

September 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-77884 →

📋 Description

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-77884
https://fluidattacks.com/advisories/suicide
https://play.google.com/store/apps/details?id=bt.photo.video.lock.album
https://github.com/advisories/GHSA-2qp8-r85p-fw36