VULNRABLE / Vulnerability / CVE-2026-55497

CVE-2026-55497

MEDIUM LOW github.com/cloudreve/Cloudreve/v4 GHSA

Exploit verdict: No active-exploit signal

CVSS Score
5.5
Severity
MEDIUM
EPSS
Source
GHSA

Summary

Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server

What this means

CVE-2026-55497 is a medium-severity vulnerability affecting github.com/cloudreve/Cloudreve/v4, rated CVSS 5.5. Published July 25, 2026.

View full advisory at GHSA →