This vulnerability in Contest Gallery Pro involves incorrect privilege assignment, enabling an attacker to escalate privileges without authentication or user interaction. It affects all versions up to 29.0.1. The CVSS score of 9.8 reflects the critical nature of this flaw, with an attacker able to remotely exploit it to gain full control over the affected system. No official fix or mitigation details have been published by the vendor or in the advisory data. The vulnerability is publicly disclosed and assigned CVE-2026-42680.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to escalate privileges, potentially gaining full control over the affected system. This could lead to complete compromise of confidentiality, integrity, and availability of the system running Contest Gallery Pro up to version 29.0.1.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected application and monitor for unusual activity related to privilege escalation attempts. Avoid exposing the affected software to untrusted networks.