jellyfin
jellyfincounted 2026-10-10 04:20 UTC
As of 2026-10-10, 221 hosts ran jellyfin with at least one known CVE on a service open at their latest check, across 24 versions with CVEs; 16 distinct CVEs.
Known CVEs on hosts running it
221hosts with known CVEs
16distinct CVEs
24versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 186 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 10.10.7 | 82 | 4 |
| 10.11.5 | 40 | 4 |
| 10.11.2 | 18 | 4 |
| 10.11.3 | 16 | 4 |
| 10.11.4 | 15 | 4 |
| 10.10.6 | 9 | 6 |
| 10.11.0 | 6 | 4 |
| 10.10.5 | 6 | 6 |
| 10.11.1 | 5 | 4 |
| 10.10.3 | 4 | 6 |
| 10.9.11 | 3 | 6 |
| 10.9.9 | 3 | 7 |
| 10.10.1 | 2 | 6 |
| 10.9.10 | 2 | 7 |
| 10.8.13 | 1 | 6 |
| 10.9.8 | 1 | 7 |
| 10.8.12 | 1 | 8 |
| 10.8.9 | 1 | 10 |
| 10.9.7 | 1 | 7 |
| 10.10.2 | 1 | 6 |
| 10.10.4 | 1 | 6 |
| 10.6.3 | 1 | 13 |
| 10.7.6 | 1 | 11 |
| 10.9.6 | 1 | 7 |
3 more versions were seen only in older observations.
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2026-35033 CRITICAL 9.3 | 221 |
| CVE-2026-35031 HIGH 8.8 | 221 |
| CVE-2026-35032 HIGH 8.6 | 221 |
| CVE-2026-35034 MEDIUM 6.5 | 221 |
| CVE-2025-31499 HIGH 7.6 | 39 |
| CVE-2025-32012 MEDIUM 4.6 | 34 |
| CVE-2024-43801 MEDIUM 5.4 | 11 |
| CVE-2023-49096 HIGH 8.8 | 4 |
| CVE-2023-48702 HIGH 7.2 | 4 |
| CVE-2023-30627 MEDIUM 5.4 | 3 |
| CVE-2022-35909 HIGH 8.8 | 2 |
| CVE-2023-27161 HIGH 7.5 | 2 |
| CVE-2022-35910 MEDIUM 5.4 | 2 |
| CVE-2023-30626 HIGH 8.1 | 1 |
| CVE-2021-21402 MEDIUM 6.5 | 1 |
| CVE-2021-29490 MEDIUM 5.8 | 1 |
Hosts: matches on services open at each host's latest check, over every version.