CVE-2026-73230

Ente provides end-to-end encrypted cloud services and security tools. Prior to 2026.07.28, Ente 2of3 card format version 1 stored the secret byte length and 32-bit FNV-1a checksum in cleartext on every card, allowing someone with one card to test candidate secrets offline and recover low-entropy ...

CVE-2026-73230

The CVE covers Ente: 2of3 cards v1. Before 2026.07.28, the card format version 1 stored the secret byte length and a 32-bit FNV-1a checksum in cleartext on every card. This enables someone with one card to offline-test candidate secrets against low-entropy or predictable secrets, potentially comp...

EUVD-2026-56893

Ente provides end-to-end encrypted cloud services and security tools. Prior to 2026.07.28, Ente 2of3 card format version 1 stored the secret byte length and 32-bit FNV-1a checksum in cleartext on every card, allowing someone with one card to test candidate secrets offline and recover low-entropy ...

CVE-2026-16751

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

PT-2026-65794

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

Albo Pretorio Online < 4.6.2 - Reflected XSS

The plugin does not sanitise and escape the Ente parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

GE Healthcare eNTEGRA P&R Trust Management Vulnerability

GE Healthcare eNTEGRA P&R Processing & Review is a General Electric GE medical nuclear computer system for the healthcare industry. A security vulnerability exists in GE Healthcare eNTEGRA P&R that originates from entegra users using 'entegra' as a password; super users in the Polestar/Polestar-i...