CVE-2026-116263 — HaschekSolutions PictShare File Upload core.php architect race condition

A CWE-362 race condition has been identified in the architect function in src/inc/core.php of the File Upload component in HaschekSolutions PictShare versions up to 3.7.1. The attack can be initiated remotely, and the source rates its complexity as high and exploitation as difficult. The exploit has been published and may be used.