OwnTone

Products

ProductCVEsExploitedLatest
OwnTone Server3–Nov 2, 2026

Exploited and recent CVEs

  • CVE-2026-120441 Medium 5.3 OwnTone Server through 29.3 SQL Injection via MPD sticker find Command 0.5%
  • CVE-2026-41458 High 8.2 OwnTone Server < 29.1 Race Condition DoS via DAAP Login 0.4%
  • CVE-2026-41457 Medium 6.9 OwnTone Server < 29.1 SQL Injection via query and filter Parameters 0.3%