CVE-2026-57945

Summary of CVE-2026-57945 (PhotoPrism) : A broken access control flaw in PhotoPrism prior to 260601-a7d098548 allows authenticated non-admin users to modify other users’ profile information by exploiting the PUT /api/v1/users/{uid} endpoint. The root cause is missing validation that ties the sess...

CVE-2026-57945 PhotoPrism - Unauthorized User Profile Modification via PUT /api/v1/users/{uid} Endpoint

PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information by sending requests to arbitrary user endpoints. Attackers can exploit the missing session-to-user identifier validation in the PU...

CVE-2026-13749

creationtimestamp| type| source ---|---|--- 2026-06-29 17:06:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxxclmri2b 2026-06-29 17:51:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2he5iid22 2026-06-29 19:21:21+00:00| seen|...

CVE-2026-13583

creationtimestamp| type| source ---|---|--- 2026-06-29 17:00:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxltt3i723 2026-06-29 20:30:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphddjufj62e 2026-06-29 22:11:11+00:00| seen|...

CVE-2026-13587

creationtimestamp| type| source ---|---|--- 2026-06-29 16:54:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxckvvnk2t 2026-06-29 20:31:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphdf4kxb723...

CVE-2026-13580

creationtimestamp| type| source ---|---|--- 2026-06-29 16:49:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwyvgzlc25 2026-06-29 17:29:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgzarylj723 2026-06-29 22:08:27+00:00| seen|...

CVE-2026-54029

creationtimestamp| type| source ---|---|--- 2026-06-29 16:42:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwlnia2z23...

CVE-2026-57338

creationtimestamp| type| source ---|---|--- 2026-06-29 16:28:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgvu2ehen2y 2026-06-29 16:58:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxivlydm2t 2026-06-29 20:43:13+00:00| seen|...

CVE-2026-57333

creationtimestamp| type| source ---|---|--- 2026-06-29 16:28:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgvtgfetf2o 2026-06-29 16:59:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxl4dxci2b 2026-06-29 20:40:15+00:00| seen|...

CVE-2026-57327

creationtimestamp| type| source ---|---|--- 2026-06-29 16:27:30+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgvrp3nho24 2026-06-29 16:27:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgvrtl7ka2n...

CVE-2026-57340

creationtimestamp| type| source ---|---|--- 2026-06-29 16:23:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgvkt5odg2w 2026-06-29 16:48:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwxw6wen2y 2026-06-29 20:43:45+00:00| seen|...

CVE-2026-57337

creationtimestamp| type| source ---|---|--- 2026-06-29 16:13:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguxseoxc2e 2026-06-29 16:48:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwx5lpsu2t 2026-06-29 20:42:10+00:00| seen|...

CVE-2026-57332

creationtimestamp| type| source ---|---|--- 2026-06-29 16:12:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguwksenn2o 2026-06-30 12:01:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpixfas4ye2l...

CVE-2026-55607

creationtimestamp| type| source ---|---|--- 2026-06-29 16:10:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgusuta6d2b...

CVE-2026-49049

creationtimestamp| type| source ---|---|--- 2026-06-29 16:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgui7cu3k2o 2026-07-03 17:15:04+00:00| seen| https://dnsc.ro/citeste/alerta-vulnerabilitate-exploatata-activ-in-joomla-helix3 2026-07-04 07:04:36+00:00| seen|...

CVE-2026-57341

creationtimestamp| type| source ---|---|--- 2026-06-29 16:01:47+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpgudozghx2b 2026-06-29 20:22:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphcw47xbf22...

CVE-2026-13567

creationtimestamp| type| source ---|---|--- 2026-06-29 15:57:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgu4srqen2w 2026-06-29 20:17:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphcnei5bn2y...

CVE-2026-11979

creationtimestamp| type| source ---|---|--- 2026-06-29 15:57:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgu3tgu6p2n 2026-06-29 21:10:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfm3u5ee2d 2026-07-01 02:34:01+00:00| seen|...

CVE-2026-57331

creationtimestamp| type| source ---|---|--- 2026-06-29 15:48:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgtlkinmc2y 2026-06-29 16:14:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgv2mvu5e25 2026-08-01 10:44:06+00:00| seen|...

CVE-2026-12856

creationtimestamp| type| source ---|---|--- 2026-06-29 15:43:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgtcm3hev2p 2026-06-29 15:54:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtxj5udt2d 2026-06-29 17:48:57+00:00| seen|...