transmission vulnerabilities

Products

• transmission/transmission 3

Latest transmission CVEs

Newest publication first

1. CVE-2026-116748 Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token

   Published 2026-10-26

   High·CVSS 8.7 EPSS 1.2%

   Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issu...

2. CVE-2010-0749 Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame.

   Published 2019-10-30

   Medium·CVSS 5.3 EPSS 1.6%

   Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame.

3. CVE-2010-0748 Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.

   Published 2019-10-30

   Critical·CVSS 9.8 EPSS 1.9%

   Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.