Skip to content
Noroxi

frigate records

10 published records for vendor frigate.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
40%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2026-25643
    37Monitor

    Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape

    CriticalCVSS 9.1Proof of conceptEPSS 4%

    frigate · frigateFeb 6, 2026

  • CVE-2026-33124
    34Monitor

    Frigate has insecure password change functionality

    HighCVSS 8.6No exploitEPSS 0%

    frigate · frigateMar 20, 2026

  • CVE-2026-33125
    32Monitor

    Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts

    HighCVSS 8.1No exploitEPSS 0%

    frigate · frigateMar 20, 2026

  • CVE-2023-45672
    30Monitor

    Frigate unsafe deserialization in `load_config_with_no_duplicates` of `frigate/util/builtin.py`

    HighCVSS 7.5No exploitEPSS 1%

    frigate · frigateOct 30, 2023

  • CVE-2024-32874
    27Monitor

    In Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service

    MediumCVSS 6.8No exploitEPSS 1%

    blakeblackshear · frigateMay 14, 2024

  • CVE-2023-45670
    27Monitor

    Frigate cross-site request forgery in `config_save` and `config_set` request handlers

    MediumCVSS 6.8No exploitEPSS 0%

    frigate · frigateOct 30, 2023

  • CVE-2026-33469
    26Monitor

    Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw

    MediumCVSS 6.5No exploitEPSS 0%

    frigate · frigateMar 26, 2026

  • CVE-2023-45671
    18Monitor

    Frigate reflected XSS through `/<camera_name>` API endpoints

    MediumCVSS 4.7Proof of conceptEPSS 1%

    frigate · frigateOct 30, 2023

  • CVE-2026-33470
    17Monitor

    Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp

    MediumCVSS 4.3No exploitEPSS 0%

    frigate · frigateMar 26, 2026

  • CVE-2026-33126
    17Monitor

    Frigate has SSRF vulnerability in /ffprobe endpoint

    MediumCVSS 4.3No exploitEPSS 0%

    frigate · frigateMar 20, 2026