Beveiligingsadvies

CVE-2026-16751

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-29 13:16:00
Laatst bijgewerkt 2026-08-27 15:35:48
Toegewezen door certcc
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.