agentprime: tautulliEvery new CVE for tautulli.https://agentprime.io/CVE-2026-45381: Tautulli: Reflected XSS in `/search` endpointhttps://agentprime.io/advisories/CVE-2026-45381/https://agentprime.io/advisories/CVE-2026-45381/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 19:14:51 GMTCVECVE-2026-49995: Tautulli: Stored Cross-Site Scripting (XSS) in the newsletterhttps://agentprime.io/advisories/CVE-2026-49995/https://agentprime.io/advisories/CVE-2026-49995/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 19:13:01 GMTCVECVE-2026-54915: Tautulli: Open redirect via whitespace bypass in /auth/redirecthttps://agentprime.io/advisories/CVE-2026-54915/https://agentprime.io/advisories/CVE-2026-54915/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 19:09:55 GMTCVECVE-2026-52835: Tautulli: Path traversal / arbitrary file write via unsanitized upload filename in import_config and import_databasehttps://agentprime.io/advisories/CVE-2026-52835/https://agentprime.io/advisories/CVE-2026-52835/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 19:06:57 GMTCVECVE-2026-43986: Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replayhttps://agentprime.io/advisories/CVE-2026-43986/https://agentprime.io/advisories/CVE-2026-43986/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 14:33:36 GMTCVEcriticalCVE-2026-43985: Taultulli has CSRF in /configUpdate via missing anti-CSRF and method restriction that allows admin credential takeoverhttps://agentprime.io/advisories/CVE-2026-43985/https://agentprime.io/advisories/CVE-2026-43985/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 14:32:29 GMTCVECVE-2026-43984: Tautulli has stored XSS in logFile via guest-controlled log_js_errors inputhttps://agentprime.io/advisories/CVE-2026-43984/https://agentprime.io/advisories/CVE-2026-43984/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 14:28:11 GMTCVECVE-2026-41065: Tautulli Vulnerable to Unauthenticated/Authenticated Remote Code Execution via Newsletter Custom Template Directoryhttps://agentprime.io/advisories/CVE-2026-41065/https://agentprime.io/advisories/CVE-2026-41065/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 14:17:13 GMTCVECVE-2026-40605: Tautulli Vulnerable to Authenticated Path Traversal in Cache Deletion APIhttps://agentprime.io/advisories/CVE-2026-40605/https://agentprime.io/advisories/CVE-2026-40605/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 12:50:10 GMTCVECVE-2026-32275: Tautulli: Unsanitized JSONP callback parameter allows cross-origin script injection and API key thefthttps://agentprime.io/advisories/CVE-2026-32275/https://agentprime.io/advisories/CVE-2026-32275/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 19:43:06 GMTCVECVE-2026-31799: Tautulli: SQL Injection in get_home_stats API endpoint via unsanitised filter parametershttps://agentprime.io/advisories/CVE-2026-31799/https://agentprime.io/advisories/CVE-2026-31799/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 19:42:56 GMTCVECVE-2026-31831: Tautulli: Unauthenticated Path Traversal in `/newsletter/image/images` endpointhttps://agentprime.io/advisories/CVE-2026-31831/https://agentprime.io/advisories/CVE-2026-31831/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 19:42:23 GMTCVECVE-2026-31804: Tautulli: Unauthenticated pms_image_proxy endpoint proxies arbitrary HTTP requests through the Plex Media Serverhttps://agentprime.io/advisories/CVE-2026-31804/https://agentprime.io/advisories/CVE-2026-31804/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 19:42:09 GMTCVECVE-2026-28505: Tautulli: RCE via eval() sandbox bypass using lambda nested scope to escape co_names whitelist checkhttps://agentprime.io/advisories/CVE-2026-28505/https://agentprime.io/advisories/CVE-2026-28505/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 19:41:54 GMTCVECVE-2025-58763: Tautulli vulnerable to Authenticated Remote Code Execution via Command Injectionhttps://agentprime.io/advisories/CVE-2025-58763/https://agentprime.io/advisories/CVE-2025-58763/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 20:13:44 GMTCVECVE-2025-58762: Tautulli vulnerable to Authenticated Remote Code Execution via write primitive and `Script` notification agenthttps://agentprime.io/advisories/CVE-2025-58762/https://agentprime.io/advisories/CVE-2025-58762/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 20:08:27 GMTCVEcriticalCVE-2025-58761: Tautulli vulnerable to Unauthenticated Path Traversal in `real_pms_image_proxy`https://agentprime.io/advisories/CVE-2025-58761/https://agentprime.io/advisories/CVE-2025-58761/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 19:59:17 GMTCVECVE-2025-58760: Tautulli vulnerable to Unauthenticated Path Traversal in `/image` endpointhttps://agentprime.io/advisories/CVE-2025-58760/https://agentprime.io/advisories/CVE-2025-58760/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 19:56:57 GMTCVE