CVE-2026-77884

UNKNOWN 0.0

Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposure

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage.

CWE	CWE-552
Vendor	brain trust
Product	gallery - private photo vault
Published	Sep 14, 2026
Last Updated	Sep 14, 2026

Stay Ahead of the Next One

Get instant alerts for brain trust gallery - private photo vault

Be the first to know when new unknown vulnerabilities affecting brain trust gallery - private photo vault are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Brain Trust / Gallery - Private Photo Vault

1.0.41

References

NVD ↗ CVE.org ↗ EPSS Data ↗

fluidattacks.com: https://fluidattacks.com/advisories/suicide play.google.com: https://play.google.com/store/apps/details?id=bt.photo.video.lock.album

Credits

Andrés Ramos