BL
Vendor
blakeblackshear
14
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-75608 | FR frigate blakeblackshear | 7.7 | Sep 22 | Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information |
| CVE-2026-75607 | FR frigate blakeblackshear | 8.1 | Sep 22 | Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations |
| CVE-2026-54652 | FR frigate blakeblackshear | 8.1 | Jul 8 | Frigate viewer can read logs exposing admin and camera credentials |
| CVE-2026-33470 | FR frigate blakeblackshear | 4.3 | Mar 26 | Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp |
| CVE-2026-33469 | FR frigate blakeblackshear | 6.5 | Mar 26 | Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw |
| CVE-2026-33126 | FR frigate blakeblackshear | 4.3 | Mar 20 | Frigate has SSRF vulnerability in /ffprobe endpoint |
| CVE-2026-33125 | FR frigate blakeblackshear | 8.1 | Mar 20 | Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts |
| CVE-2026-33124 | FR frigate blakeblackshear | 8.8 | Mar 20 | Frigate has insecure password change functionality |
| CVE-2026-25643 | FR frigate blakeblackshear | 9.1 | Feb 6 | Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape |
| CVE-2025-62382 | FR frigate blakeblackshear | 7.7 | Oct 15 | Frigate Vulnerable to Arbitrary File Read via Export Thumbnail "image_path" parameter |
| CVE-2024-32874 | FR frigate blakeblackshear | 6.8 | May 9 | In Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service |
| CVE-2023-45672 | FR frigate blakeblackshear | 7.5 | Oct 30 | Frigate unsafe deserialization in `load_config_with_no_duplicates` of `frigate/util/builtin.py` |
| CVE-2023-45671 | FR frigate blakeblackshear | 4.7 | Oct 30 | Frigate reflected XSS through `/<camera_name>` API endpoints |
| CVE-2023-45670 | FR frigate blakeblackshear | 6.8 | Oct 30 | Frigate cross-site request forgery in `config_save` and `config_set` request handlers |