blakeblackshear frigate vulnerabilities
14 published CVEs name blakeblackshear frigate among the affected products.
- 14Published CVEs14 of them scored
- 9Last 12 monthspublished in the last year
- 1Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-75608
Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information
blakeblackshear · frigate
High7.7 - CVE-2026-75607
Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations
blakeblackshear · frigate
High8.1 - CVE-2026-54652
Frigate viewer can read logs exposing admin and camera credentials
blakeblackshear · frigate
High8.1 - CVE-2026-33470
Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp
blakeblackshear · frigate
Medium6.5 - CVE-2026-33469
Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw
blakeblackshear · frigate
Medium6.5 - CVE-2026-33126
Frigate has SSRF vulnerability in /ffprobe endpoint
blakeblackshear · frigate
Medium5.0 - CVE-2026-33125
Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts
blakeblackshear · frigate
High7.1 - CVE-2026-33124
Frigate has insecure password change functionality
blakeblackshear · frigate
High8.6 - CVE-2026-25643
Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape
blakeblackshear · frigate
Critical9.1 - CVE-2025-62382
Frigate Vulnerable to Arbitrary File Read via Export Thumbnail "image_path" parameter
blakeblackshear · frigate
High7.7