7.5
High
CVE-2026-94123 Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions
Description
Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NextGEN Gallery 4.5 | earliest → 4.5.0 | No fix stated |