Vulnerabilities in immich-app

6 results

CVE-2026-25118MEDIUMimmich-server: Insecure Transmission of Authentication Credentials via Password Parameter in HTTP Request Query String When Accessing Shared AlbumsEPSS 0.4%CVE-2025-43856HIGHimmich allows account hijacking through oauth2EPSS 0.3%CVE-2026-23896HIGHimmich API Key Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-53662CRITICALimmich: One-click account takeover via XSS in login page continue redirectEPSS 0.2%CVE-2026-35455HIGHimmich has Stored XSS via OCR Text in 360° Panorama ViewerEPSS 0.2%CVE-2026-40096MEDIUMimmich: Open Redirect via Shared Album nameEPSS 0.2%