Skip to content
OpenAdvisories

Vendor

ente

3 known vulnerabilities.

Products

ente 2 Museum Server 1 ghcr.io/ente/server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-104875

    Ente: Accepted emergency contact can bypass the recovery notice period

    Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-supplied userID and updated an emergency recovery session using o…

    ente ente ghcr.io/ente/server