Sabnzbd vulnerabilities
We track 2 vulnerabilities in Sabnzbd products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Sabnzbd vulnerabilities
- 7.0 High severity
sabnzbd: Improper Limitation of a Pathname to a Restricted Directory
SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job management in `sabnzbd/api.py` accepts the user-controlled `value` parameter without path confinement before `os.path.join()` with `download_dir`. An absolute path discar
- 9.8 Critical severity
sabnzbd: Improper Control of Generation of Code
SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remote code execution. Manipulating the Parameters setting in the Notification Script functionality allows code execution with the privileges of