photoprism

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

photoprism records in CISA KEV

No photoprism vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-41711 CVE-2026-57945 · GHSA-2h2f-frxq-r68w

PhotoPrism - Unauthorized User Profile Modification via PUT /api/v1/users/{uid} Endpoint

LOW 24

PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information by sending requests to arbitrary user endpoints.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00325 Published 2026-06-29 Fixed in 260601-a7d098548 CWE-639

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0