CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

DSA-6454-1 sabnzbdplus - security update

unknown
It was discovered that the password protection of the web UI of the SABnzbd+ binary news reader/grabber could be bypassed. https://security-tracker.debian.org/tracker/DSA-6454-1

CSIRTS triage

vendor: SABnzbd+product: SABnzbd+Authentication bypass
What
The password protection mechanism of the web UI can be bypassed.
Who is affected
All deployments of SABnzbd+ with web UI password protection enabled are affected.
Urgency
High priority; authentication bypass allows unauthorized access to the application without valid credentials.
Action
Apply the security update DSA-6454-1.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch SABnzbd+

Get an email when a new SABnzbd+ advisory drops — max one per day, one-click unsubscribe.

Details

Source
Debian Security Advisories (INTL · vendor-psirt · site)
Severity
unknown
Published
2026-08-20
Exploitation
Not in CISA KEV at last sync

Original advisory: https://lists.debian.org/debian-security-announce/2026/msg00365.html

More from Debian Security Advisories