Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-16224
PUBLISHED
More InfoOfficial Page
Assigner-VulDB
Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5
View Known Exploited Vulnerability (KEV) details
Published At-19 Jul, 2026 | 07:45
Updated At-19 Jul, 2026 | 07:45
Rejected At-
▼CVE Numbering Authority (CNA)
jxxghp MoviePilot Application API improper authorization

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the patch is dc2b6910a423b3bfadeffaa303e1ba75cfb33900. Applying a patch is the recommended action to fix this issue.

Affected Products
Vendor
jxxghp
Product
MoviePilot
CPEs
  • cpe:2.3:a:jxxghp:moviepilot:*:*:*:*:*:*:*:*
Modules
  • Application API
Versions
Affected
  • 2.13.0
  • 2.13.1
  • 2.13.2
  • 2.13.3
  • 2.13.4
  • 2.13.5
Problem Types
TypeCWE IDDescription
CWECWE-285Improper Authorization
CWECWE-266Incorrect Privilege Assignment
Type: CWE
CWE ID: CWE-285
Description: Improper Authorization
Type: CWE
CWE ID: CWE-266
Description: Incorrect Privilege Assignment
Metrics
VersionBase scoreBase severityVector
4.05.3MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X
3.14.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C
3.04.3MEDIUM
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C
2.04.0N/A
AV:N/AC:L/Au:S/C:P/I:N/A:N/E:ND/RL:OF/RC:C
Version: 4.0
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X
Version: 3.1
Base score: 4.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C
Version: 3.0
Base score: 4.3
Base severity: MEDIUM
Vector:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C
Version: 2.0
Base score: 4.0
Base severity: N/A
Vector:
AV:N/AC:L/Au:S/C:P/I:N/A:N/E:ND/RL:OF/RC:C
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
reporter
geochen (VulDB User)
Timeline
EventDate
Advisory disclosed2026-07-18 00:00:00
VulDB entry created2026-07-18 02:00:00
VulDB entry last update2026-07-18 14:30:02
Event: Advisory disclosed
Date: 2026-07-18 00:00:00
Event: VulDB entry created
Date: 2026-07-18 02:00:00
Event: VulDB entry last update
Date: 2026-07-18 14:30:02
Replaced By
Rejected Reason
References
HyperlinkResource
https://vuldb.com/vuln/380046
vdb-entry
https://vuldb.com/vuln/380046/cti
signature
permissions-required
https://vuldb.com/cve/CVE-2026-16224
third-party-advisory
https://vuldb.com/submit/858227
third-party-advisory
https://github.com/jxxghp/MoviePilot/issues/5916
issue-tracking
https://github.com/jxxghp/MoviePilot/commit/dc2b6910a423b3bfadeffaa303e1ba75cfb33900
patch
https://github.com/jxxghp/MoviePilot/
product
Hyperlink: https://vuldb.com/vuln/380046
Resource:
vdb-entry
Hyperlink: https://vuldb.com/vuln/380046/cti
Resource:
signature
permissions-required
Hyperlink: https://vuldb.com/cve/CVE-2026-16224
Resource:
third-party-advisory
Hyperlink: https://vuldb.com/submit/858227
Resource:
third-party-advisory
Hyperlink: https://github.com/jxxghp/MoviePilot/issues/5916
Resource:
issue-tracking
Hyperlink: https://github.com/jxxghp/MoviePilot/commit/dc2b6910a423b3bfadeffaa303e1ba75cfb33900
Resource:
patch
Hyperlink: https://github.com/jxxghp/MoviePilot/
Resource:
product
Details not found