Vulnerabilities

TI-2026-28923 CVE-2026-40096

immich: Open Redirect via Shared Album name

MEDIUM 56

immich is a high performance self-hosted photo and video management solution.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00206 Published 2026-04-14 Fixed in 2.7.3 CWE-601

TI-2026-27586 CVE-2026-35455

LOW 33

immich is a high performance self-hosted photo and video management solution.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00229 Published 2026-04-08 Fixed in 2.7.0 CWE-79

TI-2026-20281 CVE-2026-25118

MEDIUM 61

immich is a high performance self-hosted photo and video management solution.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00467 Published 2026-04-03 Fixed in 2.6.0 CWE-598

TI-2026-19252 CVE-2026-23896

HIGH 73

immich is a high performance self-hosted photo and video management solution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00352 Published 2026-01-29 Fixed in 2.5.0 CWE-269