Sonarr 路径遍历漏洞

Sonarr is a software developed by Sonarr Corporation that helps with finding, downloading, and organizing television programs. Versions of Sonarr prior to 4.0.17.2950 contained a path traversal vulnerability. This vulnerability stemmed from the API not restricting file access to specific...

Sonarr 安全漏洞

Sonarr is a software developed by Sonarr Corporation that helps with finding, downloading, and organizing television programs. Versions of Sonarr prior to 4.0.16.2942 contained security vulnerabilities. These vulnerabilities were due to an authentication bypass issue, and they could affect users...

EUVD-2026-12144

Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. From 2.7.0 to 2.8.0, the /api/auth/login endpoint contains a logic flaw that allows unauthenticated remote attackers to enumerate valid usernames by...

PT-2026-25386

Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. From 2.7.0 to 2.8.0, the /api/auth/login endpoint contains a logic flaw that allows unauthenticated remote attackers to enumerate valid usernames by...

CVE-2026-27707

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Starting in version 2.0.0 and prior to version 3.1.0, an authentication guard logic flaw in POST /api/v1/auth/jellyfin allows an unauthenticated attacker to register a new Seerr account on any Plex-configure...

CVE-2025-13131

A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The vend...

EUVD-2025-180536

A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The vend...

CVE-2025-13131

A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The vend...

CVE-2025-13131 Sonarr Service Sonarr.Console.exe default permission

A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The vend...

CVE-2025-13131 Sonarr Service Sonarr.Console.exe default permission

A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The vend...

CVE-2025-13131

CVE-2025-13131 affects Sonarr 4.0.15.2940, where an unknown function in the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe (Service component) can be manipulated to produce incorrect default permissions. Exploitation is possible with LOCAL access and requires no user interaction beyond initial...

Sonarr 安全漏洞

Sonarr is a software from Sonarr that helps find, download and organize TV shows. A security vulnerability exists in Sonarr version 4.0.15.2940 that stems from improperly set default permissions and could lead to a local environment attack...

PT-2025-46920

Name of the Vulnerable Software and Affected Versions Sonarr version 4.0.15.2940 Description A security issue exists in Sonarr that involves incorrect default permissions. The issue is related to an unknown function within the file C:ProgramDataSonarrbinSonarr.Console.exe of the Service component...

EUVD-2024-41386

Malicious code in bioql PyPI...

CVE-2024-45247

Sonarr – CWE-601: URL Redirection to Untrusted Site 'Open Redirect'...

CVE-2024-45247

CVE-2024-45247 concerns Sonarr with a URL redirection to an untrusted site (open redirect, CWE-601). Connected sources indicate an input validation error in versions prior to Sonarr 4.0.9.2244 that enables redirection to untrusted sites. No exploit details are provided beyond this, and exact root...

CVE-2024-45247 Sonarr – CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Sonarr – CWE-601: URL Redirection to Untrusted Site 'Open Redirect'...

CVE-2024-45247 Sonarr – CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Sonarr – CWE-601: URL Redirection to Untrusted Site 'Open Redirect'...

Sonarr 输入验证错误漏洞

Sonarr is a software from Sonarr that helps find, download and organize TV shows. An input validation error vulnerability exists in versions prior to Sonarr 4.0.9.2244, which originates from a redirection to an untrusted site...

Bazarr Arbitrary File Read Vulnerability

Bazarr is a companion app to Sonarr and Radarr that manages and downloads subtitles to your specifications. Bazarr suffers from an arbitrary file read vulnerability due to an issue in component /api/swaggerui/static in Bazaar v1.4.3 that allows an unauthenticated attacker to perform directory...