CVE-2026-42657 is an unauthenticated vulnerability in Contest Gallery versions up to 28.1.7, caused by improper validation of specified quantity in input (CWE-1284). This flaw allows an attacker to potentially manipulate input parameters in a way that affects the integrity of the application. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No official fix or patch is currently documented, and no known exploits are reported in the wild.

The vulnerability impacts the integrity of the Contest Gallery application by allowing unauthenticated attackers to submit crafted input that is not properly validated. There is no impact on confidentiality or availability according to the CVSS vector. This could lead to unauthorized modification or manipulation of data within the application context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, monitor vendor communications for updates. Until a patch is released, consider implementing input validation controls or filtering at network or application layers if feasible.