CVE-2026-32275 | Tautulli up to 2.16.x JSONP Call cross site scripting (GHSA-95mg-wpqw-9qxh)

March 31, 2026 Yanac

A vulnerability was found in Tautulli up to 2.16.x and classified as problematic. Impacted is an unknown function of the component JSONP Call Handler. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-32275. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More