Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
morpheus65535

morpheus65535 bazarr vulnerabilities

4 published CVEs name morpheus65535 bazarr among the affected products.

All 4 in the listAtom feed of new CVEs
Published CVEs
4
Last 12 months
1
Critical
1
Known exploited
0

Critical 1High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20233
  2. 20261

Newest CVEs

  • CVE-2026-61826

    Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery

    morpheus65535 · bazarr

    Critical10.0
  • CVE-2023-50266

    Bazarr Blind Server-Side Request Forgery (SSRF) in the /test/<protocol>/ endpoint

    morpheus65535 · bazarr

    Medium5.3
  • CVE-2023-50265

    Bazarr Arbitrary file read in /api/swaggerui/static endpoint

    morpheus65535 · bazarr

    High7.5
  • CVE-2023-50264

    Bazarr Arbitrary file read in /system/backup/download/ endpoint

    morpheus65535 · bazarr

    High7.5

Most common weaknesses

  1. CWE-22 Path traversal2
  2. CWE-352 Cross-site request forgery (CSRF)1
  3. CWE-862 Missing authorization1
  4. CWE-918 Server-side request forgery (SSRF)1