Skip to content

Vendor

Sonarr vulnerabilities

3 published CVES affecting Sonarr, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Sonarr alerts

Products

Latest Sonarr CVEs

Newest publication first

  1. CVE-2026-30976 Sonarr Path Traversal vulnerability

    Published
    HighCVSS 7.5 EPSS 0.71%

    Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by the Sonarr process. These include application configuration files (containing API keys and database cr...

  2. CVE-2026-30975 Sonarr Authentication Bypass vulnerability

    Published
    CriticalCVSS 9.8 EPSS 0.50%

    Sonarr is a PVR for Usenet and BitTorrent users. Versions prior to 4.0.16.2942 have an authentication bypass that affected users that had disabled authentication for local addresses (Authentication Required set to: Disabled for Local Addresses) without a reverse proxy running in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.