BL
Vendor
blakeblackshear
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-75608 | FR frigate blakeblackshear | 7.7 | Sep 22 | Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information |
| CVE-2026-75607 | FR frigate blakeblackshear | 8.1 | Sep 22 | Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations |
| CVE-2026-54652 | FR frigate blakeblackshear | 8.1 | Jul 8 | Frigate viewer can read logs exposing admin and camera credentials |
| CVE-2026-33470 | FR frigate blakeblackshear | 4.3 | Mar 26 | Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp |
| CVE-2026-33469 | FR frigate blakeblackshear | 6.5 | Mar 26 | Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw |
| CVE-2026-33126 | FR frigate blakeblackshear | 4.3 | Mar 20 | Frigate has SSRF vulnerability in /ffprobe endpoint |
| CVE-2026-33125 | FR frigate blakeblackshear | 8.1 | Mar 20 | Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts |
| CVE-2026-33124 | FR frigate blakeblackshear | 8.8 | Mar 20 | Frigate has insecure password change functionality |
| CVE-2026-25643 | FR frigate blakeblackshear | 9.1 | Feb 6 | Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape |
| CVE-2025-62382 | FR frigate blakeblackshear | 7.7 | Oct 15 | Frigate Vulnerable to Arbitrary File Read via Export Thumbnail "image_path" parameter |