Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to version 0.16.3, the /ffprobe endpoint accepts arbitrary user-controlled URLs without proper validation, allowing Server-Side Request Forgery (SSRF) attacks. An attacker can use the Frigate server to make HTTP requests to internal network resources, cloud metadata services, or perform port scanning. This issue has been patched in version 0.16.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-33126 Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to version 0.16.3, the /ffprobe endpoint accepts arbitrary user-c… https://www.cve.org/CVERecord?id=CVE-2026-33126
Post summary
CVE-2026-33126 affects Frigate’s /ffprobe endpoint; updating to version 0.16.3 mitigates the issue, but no PoC, exploit tool, or active exploitation is reported.
🚨*CVE* CVE-2026-33126 Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to version 0.16.3, the /ffprobe endpoint accepts arbitrary user-c… https://www.cve.org/CVERecord?id=CVE-2026-33126 ----- Traducción: CVE-2026-33126 Fri… http://infoflow.cloud`
Post summary
The text announces CVE-2026-33126 for Frigate NVR, providing details that the /ffprobe endpoint allows arbitrary user input before version 0.16.3.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | frigate | frigate | - | - | - |