{"id":"CVE-2026-16751","aliases":["EUVD-2026-50323","GHSA-jmh3-fv99-c329"],"status":"published","title":"Ente Museum Server Authorization Bypass Vulnerability","description":"Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-08","score":0.00423,"percentile":0.36849,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-07-29T13:16:00Z","modified":"2026-10-28T02:30:26Z","products":[{"vendor":"ente","product":"museum server"}],"references":[{"url":"https://github.com/ente/ente/tree/v2.0.34","tags":["web"]},{"url":"https://vokecyber.com/research/cve-2026-16751-ente-emergency-recovery-bypass","tags":["web"]},{"url":"https://vokecyber.com/blog/cve-2026-16751-ente-emergency-recovery-bypass","tags":["article"]},{"url":"https://github.com/ente/ente/commit/4789ae67368c1f9ba7eb1a0e2c0588e4a9a55746","tags":["fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16751","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jmh3-fv99-c329"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16751.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-16751","title":"Ente Museum Server Authorization Bypass Vulnerability","description":"Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.","status":"published","published":"2026-07-29T13:16:00.45Z","modified":"2026-09-23T13:34:57.008Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:20:10.870108Z"}],"euvd":[{"id":"EUVD-2026-50323","description":"Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.","status":"published","published":"2026-07-29T13:16:00Z","modified":"2026-09-23T13:34:57Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T17:28:00.949397Z"}],"ghsa":[{"id":"GHSA-jmh3-fv99-c329","title":"Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente...","description":"Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.","status":"published","published":"2026-07-29T15:31:11Z","modified":"2026-09-23T15:30:35Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:12:20.494129Z"}],"nvd":[{"id":"CVE-2026-16751","description":"Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.","status":"published","published":"2026-07-29T14:16:28.683Z","modified":"2026-10-23T23:10:00.157Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:12:33.629616Z"}],"osv":[{"id":"CVE-2026-16751","title":"Ente Museum Server Authorization Bypass Vulnerability","description":"Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.","status":"published","published":"2026-07-29T13:16:00.45Z","modified":"2026-10-28T02:30:26.284616958Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:57.682091Z"}]}}