Medium severity6.5NVD Advisory· Published Jul 29, 2026· Updated Jul 30, 2026

CVE-2026-16751

Description

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery API request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ente Technologies/Ente Museum Serverllm-fuzzy
Ente/entellm-fuzzy

Patches

Vulnerability mechanics

References

github.com/ente/ente/tree/v2.0.34nvd
vokecyber.com/blog/cve-2026-16751-ente-emergency-recovery-bypassnvd
vokecyber.com/research/cve-2026-16751-ente-emergency-recovery-bypassnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000