Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification privileges can execute code in victim users' browsers, potentially leading to session hijacking and data exfiltration. Version 2.32.0 contains a patch for the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-27963 Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.32.0 of the Audiobookshe… https://www.cve.org/CVERecord?id=CVE-2026-27963
Post summary
The post announces a stored XSS vulnerability (CVE‑2026‑27963) affecting Audiobookshelf versions before 2.32.0.
CVE-2026-27963 Stored XSS Vulnerability in Audiobookshelf Web Application Before 2.32.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27963
Post summary
CVE-2026-27963 is a stored XSS vulnerability affecting Audiobookshelf versions prior to 2.32.0, as disclosed in the provided text.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-27963 - Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata Intel Report: https://ift.tt/Vsdb2nW
Post summary
A new CVE-2026-27963 vulnerability in Audiobookshelf is disclosed, describing a stored XSS flaw in Tooltip.vue triggered via audiobook metadata. No PoC, exploit, patch, or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | audiobookshelf | audiobookshelf | - | - | - |