PoC Index83,572 CVEs with PoCs

CVE-2026-116263

HaschekSolutions PictShare File Upload core.php architect race condition

LOW 1.2EPSS 0.1%

A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the file src/inc/core.php of the component File Upload. This manipulation causes race condition. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit has been published and may be used. Upgrading to version 3.7.2 is sufficient to resolve this issue. Patch name: 6306e33da630c04ddff60703922c2ec7b7539452. It is advisable to upgrade the affected component. The vendor was contacted early about this disclosure.

Affected
HaschekSolutions · PictShare
CVSS v4.0 VULDB
1.2 LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v4.0 VulDB
2.1 LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS v3.1 VULDB
4.6 MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v3.1 VulDB
4.6 MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CVSS v3.0 VulDB
4.6 MEDIUMCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CVSS v2.0 VULDB
4.6 MEDIUMAV:N/AC:H/Au:S/C:P/I:P/A:P
CVSS v2.0 VulDB
4.6 MEDIUMAV:N/AC:H/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C
EPSS
0.14% chance of exploitation in the next 30 days, 3rd percentile
Published
2026-10-26
Updated
2026-10-31

Proof-of-concept exploits (1)

CVE references

References