Vulnerabilities

TI-2026-73350 CVE-2026-104875

Accepted emergency contact can bypass Ente recovery notice period

HIGH 66

Ente provides end-to-end encrypted cloud services and security tools.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00411 Published 2026-10-13 Fixed in 0.1.18, 2026.07.09 CWE-639

TI-2026-51367 CVE-2026-73230

Ente: 2of3 cards v1 contain a checksum that enables offline guessing of low-entropy secrets

LOW 26

Ente provides end-to-end encrypted cloud services and security tools.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00159 Published 2026-08-11 Fixed in 2026.07.28 CWE-200

TI-2026-13948 CVE-2026-16751 · GHSA-jmh3-fv99-c329

Ente Museum Server Authorization Bypass Vulnerability

LOW 29

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery wait…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00423 Published 2026-07-29 No fix listed

Vulnerabilities

Filters

Accepted emergency contact can bypass Ente recovery notice period

Ente: 2of3 cards v1 contain a checksum that enables offline guessing of low-entropy secrets

Ente Museum Server Authorization Bypass Vulnerability