Approved changes feed: RSS · Atom

cpe:2.3:a:transmission:transmission:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTransmission (fd12fe1f-7b29-59e6-bfe1-552a2cb012ad)
ProductTransmission (44b2f08e-f5ad-5c72-aacb-2157bce0d74d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-116748 vulnerable 2026-11-03 10:15:22.035228 Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token
HIGH (8.8)
Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion.
Published: 2026-10-26T21:52:45.799Z
Updated: 2026-10-31T02:02:38.641Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0749 vulnerable 2026-06-08 04:52:04.329900 Details available
Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame.
Published: 2019-10-30T22:45:13.000Z
Updated: 2024-08-07T00:59:38.814Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0748 vulnerable 2026-06-08 04:52:04.326517 Details available
Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
Published: 2019-10-30T22:34:40.000Z
Updated: 2024-08-07T00:59:38.897Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.