Sseerr-team

Products

Exploited and recent CVEs

• CVE-2026-73291 High 7.1 Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag 0.4%
• CVE-2026-27793 Medium 6.5 Seerr has Broken Object-Level Authorization in User Profile Endpoint that Exposes Third-Party Notification Credentials 0.3%
• CVE-2026-27792 Medium 5.4 Seerr missing authentication on pushSubscription endpoints 0.2%
• CVE-2026-27707 High 7.3 Plex-configured Seerr instances vulnerable to unauthenticated account registration via Jellyfin authentication endpoint 0.6%