| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2026-71209 | 5 Aug 202606:59 | – | attackerkb |
 | CVE-2026-71209 audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal | 5 Aug 202606:59 | – | cvelist |
 | EUVD-2026-53206 | 5 Aug 202606:59 | – | euvd |
 | Audiobookshelf - Authentication Bypass | 15 Sep 202605:39 | – | nuclei |
 | CVE-2026-71209 | 5 Aug 202608:16 | – | nvd |
 | CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching | 12 Feb 202518:16 | – | osv |
 | CVE-2026-71209 audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal | 5 Aug 202606:59 | – | vulnrichment |
[
{
"vendor": "advplyr",
"product": "audiobookshelf",
"programFiles": [
"server/routers/Auth.js",
"server/managers/CacheManager.js"
],
"versions": [
{
"version": "2.19.1",
"lessThanOrEqual": "2.35.1",
"versionType": "custom",
"status": "affected"
}
],
"defaultStatus": "unknown"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| req.path | path | /items/:id/cover | Authentication-exemption bypass: unauthenticated GET to /items/:id/cover due to regex on req.path that permits URL-encoded slashes, enabling access to cover content before ownership checks. | CWE-22 |
| req.path | path | /authors/:id/image | Authentication-exemption bypass: unauthenticated GET to /authors/:id/image due to regex on req.path that permits URL-encoded slashes, enabling access to author images before ownership checks. | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
26 Aug 2026 17:36Current
5.3Medium risk
Vulners AI Score5.3
CVSS 3.17.5
EPSS0.02005
SSVC