Vulnerabilities

TI-2026-22147 CVE-2026-27793

Seerr has Broken Object-Level Authorization in User Profile Endpoint that Exposes Third-Party Notification Credentials

LOW 28

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00268 Published 2026-02-27 Fixed in 3.1.0 CWE-639

TI-2026-22146 CVE-2026-27792

LOW 24

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00242 Published 2026-02-27 Fixed in 3.1.0 CWE-862

TI-2026-22083 CVE-2026-27707

MEDIUM 49

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00558 Published 2026-02-27 Fixed in 3.1.0 CWE-288