emby
Security Risk Profile
80
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 10, 2020 to present
12
Total CVEs
6
Critical+High
1
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
8.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
80/100
critical
⚠️ 1 Active Exploits
Severity Distribution
Critical
5High
1Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
5
2
SSRF
1
Most Affected Products
1. Emby Emby8
2. Emby Emby.releases4
3. Emby Emby Server2
4. FFmpeg Project libavcodec1
5. FFmpeg Project MagicYUV decoder1
Recent Vulnerabilities
See more →bleepingcomputer-20260622210501
unknown
FFmpeg fixes PixelSmash flaw in widely used video decoder
6/22/2026⚠ Exploited🔧 No Patch
CVE-2025-64113
CVSS 9.8critical
Emby Server allows attackers to gain administrative server access without preconditions
12/8/2025
CVE-2025-64325
CVSS 9.0critical
Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard
11/18/2025🔧 No Patch
CVE-2024-30931
CVSS 6.1medium
6/25/2024🔧 No Patch
CVE-2023-4167
CVSS 6.1medium
Media Browser Emby Server cross site scripting
8/5/2023🔧 No Patch
CVE-2021-25827
CVSS 9.8critical
6/28/2023🔧 No Patch
CVE-2021-25828
CVSS 6.1medium
6/28/2023
CVE-2023-33193
CVSS 9.1critical
Emby Server Proxy Header Spoofing Vulnerability
5/30/2023🔧 No Patch
CVE-2022-36223
CVSS 6.1medium
12/16/2022🔧 No Patch
GHSL-2021-051
unknown
Unauthenticated file read in Emby Server - CVE-2021-32833
8/12/2021🔧 No Patch
Monitor emby in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.