CVE-2026-16751

CVE-2026-16751 describes an authorization bypass in the emergency recovery approval component of Ente Technologies’ Ente Museum Server. An authenticated user configured as the victim’s emergency contact can bypass the configured recovery waiting period and take over the victim’s account by issuin...