CVE-2026-72540

Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...

CVE-2026-72540

...

EUVD-2026-56010

An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the original-resolution cover photo of any album. The AlbumCover handler does not verify that the requesting user is authorized to access the specified alb...