Vulnerabilities

TI-2026-25350 CVE-2026-32891

Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS

HIGH 74

Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.00174 Published 2026-03-20 Fixed in 1.4.2 CWE-212

TI-2026-25349 CVE-2026-32890

HIGH 76

Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.00445 Published 2026-03-20 Fixed in 1.4.2 CWE-200