CVE-2026-33125

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In versions 0.16.2 and below, users with the viewer role can delete admin and low-privileged user accounts. Exploitation can lead to DoS and affect data integrity. This issue has been patched in version 0.16.3.

• CWE-285

• https://github.com/blakeblackshear/frigate/releases/tag/v0.16.3Release Notes
• https://github.com/blakeblackshear/frigate/security/advisories/GHSA-vg28-83rp-8xx4Exploit, Vendor Advisory

Published

Mar 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33119User interface (ui) misrepresentation of critical informatio…5.4
• CVE-2026-33120Untrusted pointer dereference in SQL Server allows an author…8.8
• CVE-2026-33121DataEase is an open-source data visualization and analytics …8.8
• CVE-2026-33122DataEase is an open-source data visualization and analytics …9.8
• CVE-2026-33123pypdf is a free and open-source pure-python PDF library. Ver…6.5
• CVE-2026-33124Frigate is a network video recorder (NVR) with realtime loca…8.8
• CVE-2026-33126Frigate is a network video recorder (NVR) with realtime loca…4.3
• CVE-2026-33128H3 is a minimal H(TTP) framework. In versions prior to 1.15.…10
• CVE-2026-33129H3 is a minimal H(TTP) framework. Versions 2.0.1-beta.0 thro…5.9
• CVE-2026-33130Uptime Kuma is an open source, self-hosted monitoring tool. …6.5
• CVE-2026-33131H3 is a minimal H(TTP) framework. Versions 2.0.0-0 through 2…9.1
• CVE-2026-33132ZITADEL is an open source identity management platform. Vers…5.3