CyberSecBulletin

Cleanuparr vulnerabilities

We track 2 vulnerabilities in Cleanuparr products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Cleanuparr vulnerabilities

  • 8.0 High severity

    Cleanuparr: Origin Validation Error

    CVE-2026-44184Cleanuparr

    Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. Prior to 2.9.10, Cleanuparr's global CORS policy reflects every request Origin and combines it with AllowCredential

  • 9.8 Critical severity

    Cleanuparr: Authentication Bypass by Spoofing

    CVE-2026-44183Cleanuparr

    Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. Prior to 2.9.10, TrustedNetworkAuthenticationHandler.ResolveClientIp parses the leftmost entry of the X-Forwarded-F