qui vulnerabilities

1 known vulnerability in qui from Autobrr. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  qui: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2026-30924Mar 19, 2026Autobrr

  qui is a web interface for managing qBittorrent instances. Versions 1.14.1 and below use a permissive CORS policy that reflects arbitrary origins while also returning Access-Control-Allow-Credentials: true, effectively allowing any external webpage to make aut