Auth bypass in Blakeblackshear Frigate

CVE-2026-33124

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Versions prior to 0.17.0-beta1 allow any authenticated user to change their own password without verifying the current password through the /use…

Vulnerability class: Broken Authentication

EPSS: 0.001 (19.4th percentile) — read the EPSS interpretation.