I
Vendor security profile
immich-app
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit3
Patch rate%20
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
1
0
3
CVE KEV
CVE severity distribution
5toplam CVE
High3 (60%)
Medium2 (40%)
Patch and exploitation view
%20
Verified patch
%0
CISA KEV
%60
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
5.3
CVE-2026-108165
Immich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Folder Metadata
I
Patch status unknownEPSS %0
7.7
CVE-2026-105764
Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE
I
Patch status unknownEPSS %0
6.9
CVE-2026-103532
immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization
I
Patch status unknownEPSS %0
7.1
CVE-2026-82272
Immich Locked Assets Remain Readable Through Albums and Shared Links
I
Patch status unknownEPSS %0
7.2
CVE-2026-59258
immich < 3.0.3 Shared Album Editor Ownership Takeover via updateUser
I
Patch verifiedEPSS %0