Read the docs

jxxghp

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

jxxghp records in CISA KEV

No jxxghp vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-09852 CVE-2026-11416 · GHSA-cpw6-f634-6rvj

MoviePilot Path Traversal via Cloud Storage Download Handlers

Priority HIGH 65

MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where the local destination path is constructed by concatenating the configured download directory with a…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00469 Published 2026-06-05 Fixed in 2.13.4 CWE-22
TI-2026-08860 CVE-2026-10107 · GHSA-4hhq-38m9-mgg7

MoviePilot v2 SSRF via /api/v1/system/img/{proxy} Endpoint

Priority MEDIUM 64

MoviePilot v2 contains a server-side request forgery vulnerability in the image proxy endpoint that allows authenticated attackers to request arbitrary URLs by supplying a resource_token cookie and a URL whose domain mat…

CVSS 4.0HIGH 7.0 Network Low privileges No interaction EPSS 0.0025 Published 2026-05-29 No fix listed CWE-918
TI-2026-74575 CVE-2026-77931 · GHSA-f3rc-mp36-mqvp

Command injection in MoviePilot allows remote code execution

Priority MEDIUM 42

MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browse_webp…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.01004 Published 2026-10-15 No fix listed CWE-1427
Open these records in search →