CVE-2026-16751 — Ente Museum Server Authorization Bypass Vulnerability
Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency con…
Published: 2026-07-29 · CVSS: 6.5 · CVSS 3.1
Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7