CVE-2020-13124: Sabnzbd

High severity, CVSS 8.8. EPSS: 4.7% chance of exploitation in the next 30 days.

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system.

Affected products

• Sabnzbd Sabnzbd: version 2.3.9 only; version 3.0.0 only

Published 2020-08-11. Last modified 2026-06-17.