CVE-2026-30975

Sonarr is a PVR for Usenet and BitTorrent users. Versions prior to 4.0.16.2942 have an authentication bypass that affected users that had disabled authentication for local addresses Authentication Required set to: Disabled for Local Addresses without a reverse proxy running in front of Sonarr tha...

CVE-2026-30975

CVE-2026-30975 (Sonarr) affects Sonarr releases prior to 4.0.16.2942. The issue is an authentication bypass for users who had enabled Authentication Required as “Disabled for Local Addresses” when no reverse proxy was in front or the proxy does not pass the relevant header. Patches are available ...