sabnzbd vulnerabilities

CVEs whose affected-version data names the sabnzbd package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-62965High· 7.0PoC

1w ago

SABnzbd: Orphan-job path traversal permits arbitrary file deletion

SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job management in `sabnzbd/api.py` accepts the user-controlled `value` parameter without path confinement before `os.path.join()` with `download_dir`. …

▾ Midnightsabnzbd · sabnzbdEPSS 0.34%via CVEORG