Skip to content
OpenAdvisories

Vendor

Tautulli

18 known vulnerabilities.

Products

Tautulli 18
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-43986

    Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replay

    Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public `/image/<hash>` route that resolves attacker-controlled entries from `image_hash_lookup` and replays them through the same server-side imag…

    Tautulli Tautulli
  • Critical 9.1
    CVE-2025-58762

    Tautulli vulnerable to Authenticated Remote Code Execution via write primitive and `Script` notification agent

    Tautulli is a Python based monitoring and tracking tool for Plex Media Server. In Tautulli v2.15.3 and earlier, an attacker with administrative access can use the `pms_image_proxy` endpoint to write arbitrary python scripts into the application filesystem. Th…

    Tautulli Tautulli