Skip to content
OpenAdvisories

Vendor

sentriz

4 known vulnerabilities.

Products

gonic 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-86118

    gonic before 0.22.0 Missing Administrator Check on the Subsonic startScan Endpoint

    gonic versions before 0.22.0 fail to validate administrator privileges in the startScan endpoint, allowing any authenticated user to trigger media library rescans. Attackers can repeatedly call the startScan endpoint to force CPU and I/O-intensive filesystem …

    sentriz gonic