What’s Vulnerable › Products

sentriz gonic vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your sentriz gonic version is affected

Latest sentriz gonic vulnerabilities

• CVE-2026-86118 — gonic before 0.22.0 Missing Administrator Check on the Subsonic startScan Endpoint (CVSS 4.3)
• CVE-2026-49340 — gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host (CVSS 8.1)
• CVE-2026-49339 — Path traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlist (CVSS 7.1)
• CVE-2026-49338 — Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR) (CVSS 7.1)