What’s Vulnerable › Vulnerabilities

CVE-2020-37027: Sickbeard 0.1 - Remote Command Injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-30 · updated 2026-06-17
• Weakness: CWE-78

Description

Sickbeard alpha contains a remote command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands through the extra scripts configuration. Attackers can set malicious commands in the extra scripts field and trigger processing to execute remote code on the vulnerable Sickbeard installation.

Affected products

• midgetspy Sickbeard: 0.1

References

• https://github.com/midgetspy/Sick-Beard
• https://web.archive.org/web/20190722085652/https://sickbeard.com/
• https://www.exploit-db.com/exploits/48646
• https://www.vulncheck.com/advisories/sickbeard-remote-command-injection

Get alerted when CVE-2020-37027 or the next vulnerability affects your stack