Ente
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ente | 2 | – | Oct 13, 2026 |
| ghcr.io/ente/server | 1 | – | Oct 13, 2026 |
| Museum Server | 1 | – | Jul 29, 2026 |
Exploited and recent CVEs
- CVE-2026-104875 Ente: Accepted emergency contact can bypass the recovery notice period 0.4%
- CVE-2026-104875 Ente: Accepted emergency contact can bypass the recovery notice period 0.4%
- CVE-2026-73230 Ente: 2of3 cards v1 contain a checksum that enables offline guessing of low-entropy secrets 0.2%
- CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability 0.4%