Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Emby vulnerabilities

9 published CVEs name Emby among the affected products.

All 9 in the listAtom feed of new CVEs
Published CVEs
9
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 5Medium 4Low 0Not scored 0

Newest CVEs

  • CVE-2025-46391

    CWE-284: Improper Access Control

    Emby · MediaBrowser

    Medium6.5
  • CVE-2025-46390

    CWE-204: Observable Response Discrepancy

    Emby · MediaBrowser

    High7.5
  • CVE-2025-46389

    CWE-620: Unverified Password Change

    Emby · MediaBrowser

    Medium6.5
  • CVE-2025-46388

    CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

    Emby · MediaBrowser

    Medium4.3
  • CVE-2025-46387

    CWE-639 Authorization Bypass Through User-Controlled Key

    Emby · MediaBrowser

    High8.8
  • CVE-2025-46386

    CWE-639 Authorization Bypass Through User-Controlled Key

    Emby · MediaBrowser

    High8.8
  • CVE-2025-46385

    CWE-918 Server-Side Request Forgery (SSRF)

    Emby · Windows

    High8.6
  • CVE-2025-46384

    CWE-434 Unrestricted Upload of File with Dangerous Type

    Emby · Windows

    High8.8
  • CVE-2025-46383

    CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

    Emby · Windows

    Medium6.1

Products with the most CVEs

  1. MediaBrowser6
  2. Windows3

Most common weaknesses

  1. CWE-639 Authorization bypass through a user-controlled key (IDOR)2
  2. CWE-200 Exposure of sensitive information1
  3. CWE-204 1
  4. CWE-284 Improper access control1
  5. CWE-434 Unrestricted file upload1
  6. CWE-620 1
  7. CWE-79 Cross-site scripting (XSS)1
  8. CWE-918 Server-side request forgery (SSRF)1