Browse CVEs

CRITICAL 9.1 CVE-2026-32275 Tautulli is a Python based monitoring and tracking tool for Plex Media Server. From version 1.3.10 to before version 2.17.0, an unsanitized JSONP cal… Tautulli 2.17.0+ Fix from $2,3002026-03-30 HIGH 7.5 CVE-2026-31831 Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images API endpoint is … Tautulli 2.17.0+ Fix from $1,9502026-03-30 MEDIUM 5.3 CVE-2026-31804 Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /pms_image_proxy endpoint accepts a user-… Tautulli 2.17.0+ Fix from $1,6002026-03-30 CRITICAL 10.0 CVE-2026-28505 Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the str_eval() function in notification_handl… Tautulli 2.17.0+ Fix from $2,3002026-03-30 HIGH 7.2 CVE-2025-58763 Tautulli is a Python based monitoring and tracking tool for Plex Media Server. A command injection vulnerability in Tautulli v2.15.3 and prior allows… Tautulli 2.16.0+ Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-58760 Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The `/image` API endpoint in Tautulli v2.15.3 and earlier is vulnerabl… Tautulli 2.16.0+ Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-58761 Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The `real_pms_image_proxy` endpoint in Tautulli v2.15.3 and prior is v… Tautulli 2.16.0+ Fix from $1,9502025-09-09 HIGH 7.2 CVE-2025-58762 Tautulli is a Python based monitoring and tracking tool for Plex Media Server. In Tautulli v2.15.3 and earlier, an attacker with administrative acces… Tautulli 2.16.0+ Fix from $1,9502025-09-09 MEDIUM 6.5 CVE-2019-19833EPSS 15% In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous access can be achieved in appl… Tautulli No fix yet Fix from $1,6002019-12-18 MEDIUM 6.1 CVE-2019-8939 data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page. Tautulli Patch available Fix from $1,6002019-02-19