Read the docs

EstrellaXD

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

EstrellaXD records in CISA KEV

No EstrellaXD vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-42070 CVE-2026-58466 · GHSA-q3h2-6968-258w

AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()

Priority MEDIUM 50

AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to authenticate as the administrator by using the publicly known default credentials seeded at startu…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00804 Published 2026-07-02 Fixed in 3.2.8 CWE-1392
TI-2026-42281 CVE-2026-59101 · GHSA-p8rr-9cvg-cx5j

AutoBangumi < 3.2.8 - SSRF via /api/v1/setup/test-downloader

Priority LOW 37

AutoBangumi before 3.2.8 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated remote attackers to probe internal network services by supplying arbitrary host values to an unprotected se…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00505 Published 2026-07-02 Fixed in 3.2.8 CWE-918
Open these records in search →