Chevereto has 2 CVEs on record between 2021 and 2026. 1 was published in the last 90 days. The median CVSS is 5.7 (medium).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.7
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Chevereto vulnerabilities
CVEs affecting Chevereto, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-122326Medium· 5.3PoCChevereto before 4.5.8 Private Album Image Disclosure via get-album-contents
Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json route that allows unauthenticated attackers to list private albums by supplying another user's album id. Attackers with a…
▾ TwilightChevereto · CheveretoEPSS 0.52%via CVEORG
CVE-2021-31721Medium· 6.1Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.
Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.
▾ Sunlitchevereto · cheveretoEPSS 0.89%via NVD