Sploitus

26 exploited vulnerabilities in Jellyfin

Vulnerabilities with publicly known exploits

Vendors
Jellyfin, Git, Emby, Plex, Readarr, Seerr
With known exploits
26
Affected Jellyfin versions
All versions
Affected Seerr versions
< 3.1.0
Affected Openvessl Anchorr versions
≤ 1.4.1

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2026-31852
CVSS 10.0 CRITICAL 2026-03-11
CVE-2026-35031 2 exploits
CVSS 9.9 CRITICAL 2026-04-14FIX AVAILABLE
CVE-2026-27707
CVSS 9.8 CRITICAL 2026-02-27FIX AVAILABLE
CVE-2026-35033
CVSS 9.3 CRITICAL 2026-04-14FIX AVAILABLE
CVE-2026-32891
CVSS 9.0 CRITICAL 2026-03-20FIX AVAILABLE
CVE-2025-64178
CVSS 8.9 HIGH 2025-11-04FIX AVAILABLE
CVE-2026-49247
CVSS 8.8 HIGH 2026-06-24FIX AVAILABLE
CVE-2026-48793
CVSS 8.8 HIGH 2026-06-24FIX AVAILABLE
CVE-2025-31499
CVSS 8.8 HIGH 2025-04-15FIX AVAILABLE
CVE-2023-30626 1 exploit
CVSS 8.8 HIGH 2023-04-24FIX AVAILABLE
CVE-2022-35909
CVSS 8.8 HIGH 2022-08-19FIX AVAILABLE
CVE-2026-35032
CVSS 8.6 HIGH 2026-04-14FIX AVAILABLE
CVE-2023-49096
CVSS 8.8 HIGH 2023-12-06FIX AVAILABLE
CVE-2021-21402 7 exploits
CVSS 7.7 HIGH 2021-03-23FIX AVAILABLE
CVE-2025-32012
CVSS 8.2 HIGH 2025-04-15FIX AVAILABLE
CVE-2023-27161
CVSS 7.5 HIGH 2023-03-10
CVE-2023-48702
CVSS 7.2 HIGH 2023-12-13FIX AVAILABLE
CVE-2026-35034
CVSS 6.5 MEDIUM 2026-04-14FIX AVAILABLE
CVE-2026-27793
CVSS 6.5 MEDIUM 2026-02-27FIX AVAILABLE
CVE-2026-49220
CVSS 5.7 MEDIUM 2026-06-24FIX AVAILABLE
CVE-2026-27792
CVSS 5.4 MEDIUM 2026-02-27FIX AVAILABLE
CVE-2023-23636
CVSS 5.4 MEDIUM 2023-02-03
CVE-2023-23635
CVSS 5.4 MEDIUM 2023-02-03
CVE-2022-35910
CVSS 5.4 MEDIUM 2022-08-19FIX AVAILABLE
CVE-2024-43801
CVSS 5.4 MEDIUM 2024-09-02FIX AVAILABLE
CVE-2026-49246
CVSS 6.3 MEDIUM 2026-06-24FIX AVAILABLE