A vulnerability classified as critical has been found in Tautulli up to 2.16.x. Affected by this vulnerability is the function str_eval of the file notification_handler.py. Performing a manipulation results in code injection. This vulnerability is known as CVE-2026-28505. Remote exploitation of the attack is possible. It is recommended to upgrade the affected component.
| Vendor | Product | Versions |
|---|---|---|
| null | tautulli | < 2.17.0, 2.16.x |
Updated severity to CRITICAL, added vendor and product information, and specified affected versions as 2.16.x.
Initial creation
