CyberSecBulletin

Autobrr vulnerabilities

We track 1 vulnerability in Autobrr products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2026.

1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score

Latest Autobrr vulnerabilities

  • 9.6 Critical severity

    qui: Permissive Cross-domain Security Policy with Untrusted Domains

    CVE-2026-30924Autobrr

    qui is a web interface for managing qBittorrent instances. Versions 1.14.1 and below use a permissive CORS policy that reflects arbitrary origins while also returning Access-Control-Allow-Credentials: true, effectively allowing any external webpage to make aut