blakeblackshear vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20241
3. 20251
4. 20269

Newest CVEs

• CVE-2026-75608

  Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information

  blakeblackshear · frigate

  High7.7
• CVE-2026-75607

  Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations

  blakeblackshear · frigate

  High8.1
• CVE-2026-54652

  Frigate viewer can read logs exposing admin and camera credentials

  blakeblackshear · frigate

  High8.1
• CVE-2026-33470

  Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp

  blakeblackshear · frigate

  Medium6.5
• CVE-2026-33469

  Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw

  blakeblackshear · frigate

  Medium6.5
• CVE-2026-33126

  Frigate has SSRF vulnerability in /ffprobe endpoint

  blakeblackshear · frigate

  Medium5.0
• CVE-2026-33125

  Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts

  blakeblackshear · frigate

  High7.1
• CVE-2026-33124

  Frigate has insecure password change functionality

  blakeblackshear · frigate

  High8.6
• CVE-2026-25643

  Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape

  blakeblackshear · frigate

  Critical9.1
• CVE-2025-62382

  Frigate Vulnerable to Arbitrary File Read via Export Thumbnail "image_path" parameter

  blakeblackshear · frigate

  High7.7