Vulnerability · Published Jan 30, 2026 · Assigned by VulnCheck
CVE-2020-37027Sickbeard 0.1 - Remote Command Injection
Critical 9.8
In plain English
A critical-severity OS command injection in Sickbeard from midgetspy. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)2.6%top 14.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Sickbeard alpha contains a remote command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands through the extra scripts configuration. Attackers can set malicious commands in the extra scripts field and trigger processing to execute remote code on the vulnerable Sickbeard installation.
Affected products (as reported)
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-48646 exploit
- Archived Sickbeard Official Homepage product
- Sickbeard GitHub Repository product
- VulnCheck Advisory: Sickbeard 0.1 - Remote Command Injection third-party-advisory