Emby vulnerabilities

Products

• Emby 6
• Mediabrowser 6
• Emby.releases 3
• Windows 3

Newest

• emby, embysupport security +1 more Emby Server allows attackers to gain administrative server access without preconditions CVE-2025-64113 9.3 CriticalDecember 8, 2025
• emby, embysupport emby.security +1 more Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard CVE-2025-64325 8.4 HighNovember 18, 2025
• emby mediabrowser CWE-284: Improper Access Control CVE-2025-46391 6.5 MediumAugust 6, 2025
• emby mediabrowser CWE-204: Observable Response Discrepancy CVE-2025-46390 7.5 HighAugust 6, 2025
• emby mediabrowser CWE-620: Unverified Password Change CVE-2025-46389 6.5 MediumAugust 6, 2025
• emby mediabrowser CWE-200 Exposure of Sensitive Information to an Unauthorized Actor CVE-2025-46388 4.3 MediumAugust 6, 2025
• emby mediabrowser CWE-639 Authorization Bypass Through User-Controlled Key CVE-2025-46387 8.8 HighAugust 6, 2025
• emby mediabrowser CWE-639 Authorization Bypass Through User-Controlled Key CVE-2025-46386 8.8 HighAugust 6, 2025
• emby windows CWE-918 Server-Side Request Forgery (SSRF) CVE-2025-46385 8.6 HighJuly 20, 2025
• emby windows CWE-434 Unrestricted Upload of File with Dangerous Type CVE-2025-46384 8.8 HighJuly 20, 2025
• emby windows CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') CVE-2025-46383 6.1 MediumJuly 20, 2025
• emby media server Stored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a... CVE-2024-30931 6.1 MediumJune 25, 2024
• media browser emby server, emby emby.releases +1 more Media Browser Emby Server cross site scripting CVE-2023-4167 3.5 LowAugust 5, 2023
• emby Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a... CVE-2021-25828 6.1 MediumJune 28, 2023
• emby Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For... CVE-2021-25827 9.8 CriticalMay 30, 2023
• emby emby.releases, embysupport security +1 more Emby Server Proxy Header Spoofing Vulnerability CVE-2023-33193 9.1 CriticalMay 30, 2023
• emby In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible... CVE-2022-36223 6.1 MediumDecember 16, 2022
• emby emby.releases Unauthenticated file read in Emby Server CVE-2021-32833 8.6 HighSeptember 9, 2021
• emby Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter. CVE-2020-26948 EPSS 87.2% 9.8 CriticalOctober 10, 2020