This CVE has been withdrawn by MITRE
MITRE marked CVE-2026-72540 as REJECTED on . There is no longer a valid blast radius to assess. Any historical package or vendor data shown below is preserved for audit reference only.
Reason given by MITRE
Red Hat CNA-LR concluded that this CVE is not valid.
CVE-2026-72540 Blast Radius
✕ WITHDRAWN — HISTORICAL DATAAn insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the orig…