LibrePhotos

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

LibrePhotos records in CISA KEV

No LibrePhotos vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-41709 CVE-2026-57943 · GHSA-6649-8h33-mv2c

LibrePhotos < 1.0.0 - Insecure Direct Object Reference in SetPhotosShared Endpoint

MEDIUM 60

LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to other users' private photos by bypassing o…

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00339 Published 2026-06-29 Fixed in 1.0.0 CWE-639

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0