CVE-2026-25035: Wasiliy Strecker / Contestgallery Developer Contest Gallery

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2.

Affected products

• Wasiliy Strecker / Contestgallery Developer Contest Gallery: up to and including 28.1.2.2

Published 2026-03-25. Last modified 2026-06-17.