CVE-2026-77884

The Private Photo Vault app for Android versions up to 1.0.41 is vulnerable due to the initiation of an unauthenticated HTTP server on TCP port 8080, exposing files and directory listings from the device's external storage to anyone on the local network. This could lead to unauthorized access to sensitive personal photos and data. Users of the affected app, particularly those storing private information, should prioritize immediate updates or alternative solutions to mitigate this risk.