Skip to content
OpenAdvisories

Vendor

transmission

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-116748 Scanner template

    Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token

    Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response …