CVE-2026-32275 in Tautulli
Résumé (Anglaise)
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. From version 1.3.10 to before version 2.17.0, an unsanitized JSONP callback parameter allows cross-origin script injection and API key theft. This issue has been patched in version 2.17.0.
Responsable
GitHub_M
Réserver
11/03/2026
Divulgation
30/03/2026
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354261 | Tautulli JSONP Call cross site scripting | 79 | Non défini | Correctif officiel | CVE-2026-32275 |