tag

Account-Hijacking

Immich Stored XSS to API Key Exfiltration and Account Hijacking (CVE-2026-35455)

CVE-2026-35455· Immich (self-hosted photo/video management) unpatched