Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: EstrellaXD Clear all filters
TI-2026-42070 CVE-2026-58466 · GHSA-q3h2-6968-258w

AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()

Priority MEDIUM 50

AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to authenticate as the administrator by using the publicly known default credentials seeded at startu…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00804 Published 2026-07-02 Fixed in 3.2.8 CWE-1392
TI-2026-42281 CVE-2026-59101 · GHSA-p8rr-9cvg-cx5j

AutoBangumi < 3.2.8 - SSRF via /api/v1/setup/test-downloader

Priority LOW 37

AutoBangumi before 3.2.8 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated remote attackers to probe internal network services by supplying arbitrary host values to an unprotected se…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00505 Published 2026-07-02 Fixed in 3.2.8 CWE-918