[ Vendor · 1 CVEs ]

OwnTone

CVEs affecting OwnTone published in the last 30 days, plus any OwnTone CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-120441 2 Nov 2026 CVSS 5.3 OwnTone ServerOwnTone Server through 29.3 contains an sql injection vulnerability in mpd_sticker_find() in src/mpd.c that allows unauthenticated remote attackers…