CVE-2026-43986 - Critical SSRF in Tautulli < 2.17.1. Low-privilege users can force server-side fetches via unauthenticated endpoint. CVSS 9.9. No patch yet. Isolate or disable immediately. #CVE #Tautulli #infosec
https://www.valtersit.com/cve/CVE-2026-43986/