Login Request a demo
High severity · published Sep 14, 2026
CVE-2026-77884
Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposure
7.1
CVSS
0.3%
EPSS
No
On KEV
Description
Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GP
Gallery - Private Photo Vault · Brain Trust
1.0.41 · source: vendor
Affected product
GP
Gallery - Private Photo Vault
Brain Trust
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-77884
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-77884
fluidattacks.com
https://fluidattacks.com/advisories/suicide
play.google.com
https://play.google.com/store/apps/details?id=bt.photo.video.lock.album