High severity8.8NVD Advisory· Published Aug 11, 2020· Updated Jun 17, 2026

CVE-2020-13124

Description

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

sabnzbd/SABnzbd3 versions
cpe:2.3:a:sabnzbd:sabnzbd:2.3.9:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sabnzbd:sabnzbd:2.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:sabnzbd:sabnzbd:3.0.0:alpha2:*:*:*:*:*:*
- (no CPE)range: 2.3.9, 3.0.0Alpha2
SABnzbd/SABnzbddescription

Patches

Vulnerability mechanics

References

github.com/sabnzbd/sabnzbd/commits/developnvdPatchThird Party Advisory
github.com/sabnzbd/sabnzbd/security/advisories/GHSA-9x87-96gg-33w2nvdPatchThird Party Advisory
sabnzbd.org/downloadsnvdProductVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000