<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: blakeblackshear-frigate</title><description>Every new CVE for blakeblackshear-frigate.</description><link>https://agentprime.io/</link><item><title>CVE-2026-75608: Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information</title><link>https://agentprime.io/advisories/CVE-2026-75608/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75608/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 15:36:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75607: Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations</title><link>https://agentprime.io/advisories/CVE-2026-75607/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75607/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 15:35:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-54652: Frigate viewer can read logs exposing admin and camera credentials</title><link>https://agentprime.io/advisories/CVE-2026-54652/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54652/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 14:52:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33470: Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp</title><link>https://agentprime.io/advisories/CVE-2026-33470/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33470/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Mar 2026 17:06:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33469: Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw</title><link>https://agentprime.io/advisories/CVE-2026-33469/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33469/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Mar 2026 17:05:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33126: Frigate has SSRF vulnerability in /ffprobe endpoint</title><link>https://agentprime.io/advisories/CVE-2026-33126/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33126/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Mar 2026 19:57:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33124: Frigate has insecure password change functionality</title><link>https://agentprime.io/advisories/CVE-2026-33124/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33124/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Mar 2026 09:16:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25643: Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape</title><link>https://agentprime.io/advisories/CVE-2026-25643/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25643/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Feb 2026 19:16:26 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-62382: Frigate Vulnerable to Arbitrary File Read via Export Thumbnail &quot;image_path&quot; parameter</title><link>https://agentprime.io/advisories/CVE-2025-62382/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-62382/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Oct 2025 17:07:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-45672: Frigate unsafe deserialization in `load_config_with_no_duplicates` of `frigate/util/builtin.py`</title><link>https://agentprime.io/advisories/CVE-2023-45672/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-45672/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Oct 2023 22:49:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-45671: Frigate reflected XSS through `/&lt;camera_name&gt;` API endpoints</title><link>https://agentprime.io/advisories/CVE-2023-45671/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-45671/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Oct 2023 22:41:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-45670: Frigate cross-site request forgery in `config_save` and `config_set` request handlers</title><link>https://agentprime.io/advisories/CVE-2023-45670/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-45670/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Oct 2023 22:38:19 GMT</pubDate><category>CVE</category></item></channel></rss>