A vulnerability classified as problematic has been found in Piwigo up to 16.2.x. This impacts the function pwg.history.search of the component Browsing History Handler. Performing a manipulation results in missing authorization.

This vulnerability is identified as CVE-2026-27833. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.