CVE-2026-61611 | LycheeOrg Lychee up to 7.6.0 Unlock Unlock.php authorize improper authorization

October 15, 2026 Yanac

A vulnerability identified as problematic has been detected in LycheeOrg Lychee up to 7.6.0. The affected element is the function UnlockAlbumRequest::authorize of the file app/Actions/Album/Unlock.php of the component Unlock. Performing a manipulation results in improper authorization.

This vulnerability was named CVE-2026-61611. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More