Is CVE-2026-61971 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-61971?

CVE-2026-61971 has a CVSS v3 severity of LOW (2.7).

Back

CVE-2026-61971

Description

Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Profile Picture: from n/a through <= 2.6.3.