PatchTheCVEnzbget vulnerabilities and fixes
Recent CVEs affecting nzbget, with upgrade or downgrade steps. 2 tracked.
nzbget has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-11-22. Highest priority: CVE-2023-49102 (score 54/100).
- CVE-2023-49102 HIGH 8.8 DOWNGRADE NZBGet 21.1 allows authenticated remote code execution because the unarchive programs (7za and unrar) preserve
- CVE-2008-2266 MEDIUM 4.4 UPGRADE DOWNGRADE uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local u
FAQ
How do I fix nzbget vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nzbget being exploited right now?
None of the tracked nzbget CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nzbget CVE should I patch first?
CVE-2023-49102 currently ranks highest (54/100): NZBGet 21.1 allows authenticated remote code execution because the unarchive programs (7za and unrar) preserve.