Skip to content

Product

sct/overseerr vulnerabilities

1 published CVE affecting sct/overseerr, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest sct/overseerr CVEs

Newest publication first

  1. CVE-2026-65696 Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API

    Published
    MediumCVSS 5.3 EPSS 0.26%

    Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.