A vulnerability was found in Tautulli up to 2.16.x and classified as problematic. Impacted is an unknown function of the component JSONP Call Handler. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-32275. It is possible to launch the attack remotely.
| Vendor | Product | Versions |
|---|---|---|
| null | tautulli | >= 1.3.10, < 2.17.0 |
Updated vendor to Tautulli, severity to HIGH, CVSS estimate to 7.5, and noted that the vulnerability is actively exploited.
Initial creation
