transmission

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

transmission records in CISA KEV

No transmission vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-80957 CVE-2026-116748 · GHSA-jw4h-7968-5hj9

Permissive CORS in Transmission exposes RPC anti-CSRF token

MEDIUM 42

Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.01246 Published 2026-10-26 Fixed in 4.1.3 CWE-942

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0