Vulnerabilities

TI-2026-83228 CVE-2026-61826

Missing authentication in Bazarr Plex OAuth API allows tampering

MEDIUM 48

Bazarr is a companion application to Sonarr and Radarr.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00263 Published 2026-10-30 Fixed in 1.5.7-beta.14 CWE-352

TI-2024-26899 CVE-2024-40348 · GHSA-v64x-66h7-9cfg

HIGH 75

An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.08223 Published 2024-07-20 No fix listed CWE-22

TI-2023-27493 CVE-2023-50266

LOW 25

Bazarr manages and downloads subtitles.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00589 Published 2023-12-15 No fix listed CWE-918

TI-2023-27492 CVE-2023-50265

HIGH 72

Bazarr manages and downloads subtitles.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00924 Published 2023-12-15 Fixed in 1.3.1 CWE-22

TI-2023-27491 CVE-2023-50264

LOW 35

Bazarr manages and downloads subtitles.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00924 Published 2023-12-15 Fixed in 1.3.1 CWE-22