CVE-2026-94123

Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions.

Published Sep 30, 2026
CVSS 7.5 high
0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

Syed Balkhi NextGEN Gallery

CVE-2026-94123 at the National Vulnerability Database