A vulnerability identified as critical has been detected in MiniGal Nano up to 0.3.5. This vulnerability affects unknown code of the file index.php. The manipulation of the argument dir leads to path traversal. This vulnerability only affects products that are no longer supported by the maintainer.
This vulnerability is uniquely identified as CVE-2026-25869. The attack is possible to be carried out remotely. No exploit exists.
