CVE-2020-26948

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-918

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 10, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-26955.3Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Approval Framework). SuppoCVE-2020-269508.8In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condiCVE-2020-269516.1A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker alreCVE-2020-269528.8Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash whCVE-2020-269534.3It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishCVE-2020-269544.3When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed deCVE-2020-269556.5When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operaCVE-2020-269566.1In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerabiliCVE-2020-269576.5OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a failure to enforce CVE-2020-269586.1Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. TCVE-2020-269598.8During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruCVE-2020-26968.8Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). The supported version that is affecte
CVE-2020-26948: Critical severity, CVSS 9.8 | Vulnix