{
  "cveId": "CVE-2026-62965",
  "url": "https://patchblox.com/security/cve/CVE-2026-62965",
  "summary": "CVE-2026-62965 is fixed in sabnzbdplus on 1 platform by DEBIAN-CVE-2026-62965 (version 5.1.1\u002Bdfsg-1), released October 31, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "sabnzbdplus: SABnzbd is an open source automated Usenet download tool",
  "description": "SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job management in \u0060sabnzbd/api.py\u0060 accepts the user-controlled \u0060value\u0060 parameter without path confinement before \u0060os.path.join()\u0060 with \u0060download_dir\u0060. An absolute path discards that base directory. An attacker with a valid API key can invoke \u0060mode=status\u0060 with \u0060name=delete_orphan\u0060 to reach \u0060_api_delete_orphan\u0060 and \u0060remove_all()\u0060 in \u0060sabnzbd/filesystem.py\u0060, which uses \u0060shutil.rmtree()\u0060 for recursive deletion. The advisory also identifies \u0060_api_add_orphan\u0060 and \u0060_api_delete_all_orphan\u0060 as affected by the path-validation issue, while its concrete arbitrary-deletion trace is through \u0060_api_delete_orphan\u0060. The API key is stored in plaintext in \u0060sabnzbd.ini\u0060. The attacker can delete files or directories writable by the SABnzbd process, including configuration, queue data, and downloads, but system files outside the regular user\u0027s ownership are not affected. This issue is fixed in version 5.1.0Beta3.",
  "published": "2026-10-30T21:17:14Z",
  "severity": "",
  "epss": 0.00335,
  "epssPercentile": 0.27064,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "sabnzbdplus",
      "release": "Debian 14",
      "fixedVersion": "5.1.1\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2026-62965",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-62965",
      "released": "2026-10-31T22:18:21Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}