2 matches found
CVE-2026-61610
Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved invokes...
3.1CVSS5.9AI score0.00306EPSS
SaveExploits0References6
EUVD-2026-102190
Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved invokes...
2.3CVSS5.9AI score0.00306EPSS
SaveExploits0References4
20