Aadvplyr

Products

Exploited and recent CVEs

• CVE-2026-73085 Medium 5.3 Audiobookshelf: Refresh Token Accepted on Resource Endpoints 0.5%
• CVE-2026-71209 High 7.5 audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal 2.2%
• CVE-2026-42888 Medium 6.9 Audiobookshelf: Path Traversal vulnerability in the audiobookshelf project 0.3%
• CVE-2026-42887 Medium 4.5 Audiobookshelf: Stored Cross-Site Scripting in Login Page Custom Message 0.3%
• CVE-2026-42886 Medium 4.9 Audiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload 0.3%
• CVE-2026-42885 Medium 4.3 Audiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existence 0.3%
• CVE-2026-42884 Medium 4.3 Audiobookshelf: Collection endpoints bypass library access controls exposing restricted library data 0.2%
• CVE-2026-42883 Medium 6.5 Audiobookshelf: Cross-library file exfiltration via unscoped bulk download endpoint 0.3%
• CVE-2026-27974 Medium 4.8 Audiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player) 0.2%
• CVE-2026-27963 Medium 4.8 Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata 0.3%
• CVE-2026-27973 Medium 4.0 Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App) 0.2%
• CVE-2026-27973 Medium 4.0 Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App) 0.2%
• CVE-2025-57800 High 8.8 Audiobookshelf vulnerable to OIDC token exfiltration and account takeover 0.5%
• CVE-2025-46338 Medium 6.9 Audiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload 0.4%
• CVE-2025-25205 High 8.2 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching 4.8%
• CVE-2024-43797 Medium 6.3 Path Traversal in audiobookshelf 0.5%
• CVE-2024-35236 Medium 4.8 Audiobookshelf Cross-Site-Scripting vulnerability via crafted ebooks 0.8%
• CVE-2023-51665 Medium 4.3 Audiobookshelf vulnerable to Blind SSRF in `Auth.js` 0.3%
• CVE-2023-51697 Medium 4.3 Audiobookshelf vulnerable to Blind SSRF in `podcastUtils.js` 0.3%
• CVE-2023-47624 High 7.5 Audiobookshelf Arbitrary File Read Vulnerability 0.8%
• CVE-2023-47619 High 8.1 Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability 0.6%