Login Request a demo
FR
Product
frigate
by blakeblackshear · last CVE Sep 22, 2026
10
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 6Medium 3Low 0
Severity
All severities10Critical1High6Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add frigate to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33124
8.8
0%
Mar 20
Frigate has insecure password change functionality
Affected: < 0.17.0-beta1
CVE-2026-75607
8.1
1%
Sep 22
Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations
Affected: < 0.17.2
CVE-2026-54652
8.1
0%
Jul 8
Frigate viewer can read logs exposing admin and camera credentials
Affected: <= 0.17.1
CVE-2026-33125
8.1
0%
Mar 20
Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts
Affected: < 0.16.3
CVE-2026-75608
7.7
0%
Sep 22
Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information
Affected: < 0.18.0
CVE-2025-62382
7.7
0%
Oct 15
Frigate Vulnerable to Arbitrary File Read via Export Thumbnail "image_path" parameter
Affected: < 0.16.2
Showing 6