Sploitus

CVE-2026-54652

No indexed exploits for CVE-2026-54652 yet

Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any authenticated user including the viewer role to download Frigate and nginx logs, exposing auto-generated admin passwords and camera credentials logged in request query strings and enabling viewer-to-admin privilege escalation. A fixed release has not been identified.

Affected products
Frigate, Nginx
CVSS 3.1
8.1 HIGH
EPSS
0.2% (14th percentile)
Weakness
CWE-863, CWE-598, CWE-532, CWE-269
NVD status
Deferred
Published
2026-07-08
CVE-2026-54652 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2026-54652 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2026-54652 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.