Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by the Sonarr process. These include application configuration files (containing API keys and database credentials), Windows system files, and any user-accessible files on the same drive This issue only impacts Windows systems; macOS and Linux are unaffected. Files returned from the API were not limited to the directory on disk they were intended to be served from. This problem has been patched in 4.0.17.2950 in the nightly/develop branch or 4.0.17.2952 for stable/main releases. It's possible to work around the issue by only hosting Sonarr on a secure internal network and accessing it via VPN, Tailscale or similar solution outside that network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-25 | 2 | Disclosure1Patch1 |
| 2026-03-26 | 2 | Disclosure2 |
CVE-2026-30976 Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file … https://www.cve.org/CVERecord?id=CVE-2026-30976
Post summary
CVE-2026-30976 is a remote file read vulnerability affecting Sonarr 4.x versions prior to 4.0.17.2950. No PoC, exploit code, active exploitation, or patch information is provided.
🚨*CVE* CVE-2026-30976 Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file … https://www.cve.org/CVERecord?id=CVE-2026-30976 ----- Traducción: CVE-2026-30976 Son… http://infoflow.cloud`
Post summary
The post announces CVE-2026-30976, noting that unauthenticated remote attackers may read any file in Sonarr versions prior to 4.0.17.2950, without providing PoC, exploit code, or evidence of active exploitation.
[CVE-2026-30976: HIGH] Critical vulnerability in Sonarr versions before 4.0.17.2950 allows remote unauthenticated attackers on Windows systems to access sensitive files. Update to patched versions immediately.#cve,CVE-2026-30976,#cybersecurity https://cvefind.com/CVE-2026-30976
Post summary
Critical Sonarr vulnerability (CVE-2026-30976) is disclosed with an immediate patch recommended; no PoC or active exploitation is referenced.
🟠 CVE-2026-30976 - High Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by the Sonarr pr... https://www.thehackerwire.com/vulnerability/CVE-2026-30976/ https://t.co/RIX1fNRGmH
Post summary
High‑severity arbitrary file‑read vulnerability disclosed for Sonarr versions prior to 4.0.17.2950; no PoC, exploit, active attack, or patch information is provided in the text.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | sonarr | sonarr | - | - | - |