PT-2026-28130

CVE-2026-30976

Publicado

2026-03-25

Atualizado

2026-03-26

Descrição por

CVSS 3.1

8.6

Alta

MétricasAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sonarr versions prior to 4.0.17.2950

Description Sonarr is a PVR for Usenet and BitTorrent users. An unauthenticated remote attacker can potentially read any file readable by the Sonarr process. This includes application configuration files (containing API keys and database credentials) and Windows system files. This issue only impacts Windows systems. Files returned from the API were not limited to the directory on disk they were intended to be served from.

Recommendations Update to version 4.0.17.2950 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Kwstubbs

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

Identificadores relacionados