CVE-2025-62406

Piwigo is a full featured open source photo gallery application for the web. In Piwigo 15.6.0, using the password reset function allows sending a password-reset URL by entering an existing username or email address. However, the hostname used to construct this URL is taken from the HTTP request's Host header and is not validated at all. Therefore, an attacker can send a password-reset URL with a modified hostname to an existing user whose username or email the attacker knows or guesses. This issue has been patched in version 15.7.0.

• CWE-640

• https://github.com/Piwigo/Piwigo/commit/9d2565465efc3570963ff431b45cad21610f6692Patch
• https://github.com/Piwigo/Piwigo/security/advisories/GHSA-9986-w7jf-33f6Exploit, Vendor Advisory
• https://github.com/Piwigo/Piwigo/security/advisories/GHSA-9986-w7jf-33f6Exploit, Vendor Advisory

Published

Nov 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-62400Moodle exposed the names of hidden groups to users who had p…6.5
• CVE-2025-62401An issue in Moodle’s timed assignment feature allowed studen…4.3
• CVE-2025-62402API users via `/api/v2/dagReports` could perform Dag code ex…5.4
• CVE-2025-62403An out-of-bounds read vulnerability exists in the EMF functi…7.1
• CVE-2025-62404Heap-based Buffer Overflow vulnerability in TP-Link Archer A…8
• CVE-2025-62405Heap-based Buffer Overflow vulnerability in TP-Link Archer A…8
• CVE-2025-62407Frappe is a full-stack web application framework. Prior to 1…6.1
• CVE-2025-62408c-ares is an asynchronous resolver library. Versions 1.32.3 …5.9
• CVE-2025-62409Envoy is a cloud-native, open source edge and service proxy.…7.5
• CVE-2025-6241LsiAgent.exe, a component of SysTrack from Lakeside Software…4.4
• CVE-2025-62410In versions before 20.0.2, it was found that --disallow-code…9.4
• CVE-2025-62411LibreNMS is a community-based GPL-licensed network monitori…4.8