Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password. Attackers can send specially crafted requests to the REST API endpoints to modify credentials without authentication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-16 | 1 | Disclosure1 |
| 2026-03-17 | 1 | General1 |
CVE Alert: CVE-2017-20220 - Serviio - Serviio PRO - https://www.redpacketsecurity.com/cve-alert-cve-2017-20220-serviio-serviio-pro/ #OSINT #ThreatIntel #CyberSecurity #cve-2017-20220 #serviio #serviio-pro
Post summary
The post issues a notice about CVE-2017-20220 affecting Serviio PRO, offering a link for further details, but provides no technical specifics or additional actionable information.
CVE-2017-20220 Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login… https://www.cve.org/CVERecord?id=CVE-2017-20220
Post summary
The post briefly announces a CVE for Serviio PRO 1.8, describing an improper access control flaw that permits unauthenticated changes to the mediabrowser login, but it offers no PoC, exploit code, or patch information.