Vulnerabilities

Filters

1 selected

14 records

Sort

Vendor: blakeblackshear Clear all filters

TI-2026-52912 CVE-2026-75608

Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information

HIGH 67

Frigate is an open source network video recorder.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00366 Published 2026-09-22 Fixed in 0.18.0 CWE-863

TI-2026-52911 CVE-2026-75607

Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations

HIGH 68

Frigate is an open source network video recorder.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00636 Published 2026-09-22 Fixed in 0.17.2 CWE-862

TI-2026-39479 CVE-2026-54652

Frigate viewer can read logs exposing admin and camera credentials

HIGH 70

Frigate is an open source network video recorder.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00293 Published 2026-07-08 No fix listed CWE-269

TI-2026-25866 CVE-2026-33470

Missing authorization in blakeblackshear frigate

MEDIUM 62

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00317 Published 2026-03-26 No fix listed CWE-862

TI-2026-25865 CVE-2026-33469

Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw

MEDIUM 62

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00255 Published 2026-03-26 No fix listed CWE-863

TI-2026-25558 CVE-2026-33126

Frigate has SSRF vulnerability in /ffprobe endpoint

MEDIUM 56

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00201 Published 2026-03-20 Fixed in 0.16.3 CWE-918

TI-2026-25557 CVE-2026-33125 · GHSA-vg28-83rp-8xx4

Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts

HIGH 68

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00253 Published 2026-03-20 Fixed in 0.16.3 CWE-285

TI-2026-25556 CVE-2026-33124

Frigate has insecure password change functionality

MEDIUM 45

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00257 Published 2026-03-20 Fixed in 0.17.0-beta1 CWE-287

TI-2026-20743 CVE-2026-25643

Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape

HIGH 74

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02987 Published 2026-02-06 Fixed in 0.16.4 CWE-250

TI-2025-38649 CVE-2025-62382

Frigate Vulnerable to Arbitrary File Read via Export Thumbnail "image_path" parameter

HIGH 67

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00398 Published 2025-10-15 Fixed in 0.16.2 CWE-73

TI-2024-21746 CVE-2024-32874 · GHSA-w4h6-9wrp-v5jq

In Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service

LOW 31

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00774 Published 2024-05-09 Fixed in 0.13.2 CWE-770

TI-2023-24471 CVE-2023-45672

Frigate unsafe deserialization in `load_config_with_no_duplicates` of `frigate/util/builtin.py`

LOW 36

Frigate is an open source network video recorder.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01562 Published 2023-10-30 Fixed in 0.13.0-beta3 CWE-502

TI-2023-24470 CVE-2023-45671

Frigate reflected XSS through `/<camera_name>` API endpoints

LOW 24

Frigate is an open source network video recorder.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01384 Published 2023-10-30 Fixed in 0.13.0-beta3 CWE-79

TI-2023-24469 CVE-2023-45670

Frigate cross-site request forgery in `config_save` and `config_set` request handlers

LOW 33

Frigate is an open source network video recorder.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00464 Published 2023-10-30 Fixed in 0.13.0-beta3 CWE-352