p PatchFirst

CVE-2026-38978

CVE-2026-38978

This page contains facts from public vulnerability sources. Check the original advisory before updating.

transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.

CVSS 5.3 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • transmission Debian:12

    Versions
    • 3.00-2.1
    • 3.00-2.1+deb12u1
    • 4.0.1-1
    • 4.0.2-1
    • 4.0.5-1
    • 4.0.5-2
    • 4.0.5-3
    • 4.0.6+dfsg-1
    • 4.0.6+dfsg-2
    • 4.0.6+dfsg-3
    • 4.1.0+dfsg-1
    • 4.1.0+dfsg-1~bpo13+1
    • 4.1.0~beta1+dfsg-1
    • 4.1.0~beta2+dfsg-1
    • 4.1.0~beta2+dfsg-2
    • 4.1.0~beta2+dfsg-3
    • 4.1.0~beta2+dfsg-4
    • 4.1.0~beta2+dfsg-5
    • 4.1.0~beta3+dfsg-1
    • 4.1.0~beta4+dfsg-1
    • 4.1.0~beta5+dfsg-1
    • 4.1.1+dfsg-1
    • 4.1.1+dfsg-1~bpo13+1
    • 4.1.2+dfsg-1
    • 4.1.2+dfsg-1~bpo13+1
    • 4.1.3+dfsg-1
    • 4.1.3+dfsg-1~bpo13+1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • transmission Debian:13

    Versions
    • 4.1.0~beta2+dfsg-3
    • 4.1.0~beta2+dfsg-3+deb13u1
    Affected ranges
    • ECOSYSTEM: < 4.1.0~beta2+dfsg-3+deb13u2

    Update to 4.1.0~beta2+dfsg-3+deb13u2

  • transmission Debian:14

    Versions
    • 4.1.0+dfsg-1
    • 4.1.0+dfsg-1~bpo13+1
    • 4.1.0~beta2+dfsg-3
    • 4.1.0~beta2+dfsg-4
    • 4.1.0~beta2+dfsg-5
    • 4.1.0~beta3+dfsg-1
    • 4.1.0~beta4+dfsg-1
    • 4.1.0~beta5+dfsg-1
    • 4.1.1+dfsg-1
    • 4.1.1+dfsg-1~bpo13+1
    • 4.1.2+dfsg-1~bpo13+1
    Affected ranges
    • ECOSYSTEM: < 4.1.2+dfsg-1

    Update to 4.1.2+dfsg-1

  • transmission Ubuntu:16.04:LTS

    Versions
    • 2.84-1ubuntu1
    • 2.84-2
    • 2.84-3
    • 2.84-3ubuntu1
    • 2.84-3ubuntu2
    • 2.84-3ubuntu3
    • 2.84-3ubuntu3.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • transmission Ubuntu:18.04:LTS

    Versions
    • 2.92-2ubuntu3
    • 2.92-3ubuntu1
    • 2.92-3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • transmission Ubuntu:20.04:LTS

    Versions
    • 2.94-2ubuntu1
    • 2.94-2ubuntu2
    • 2.94-2ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • transmission Ubuntu:22.04:LTS

    Versions
    • 3.00-1ubuntu2
    • 3.00-1ubuntu5
    • 3.00-2ubuntu1
    • 3.00-2ubuntu2
    • 3.00-2ubuntu2.1
    Affected ranges
    • ECOSYSTEM: < 3.00-2ubuntu2.2

    Update to 3.00-2ubuntu2.2

  • transmission Ubuntu:24.04:LTS

    Versions
    • 4.0.2-1ubuntu3
    • 4.0.5-1
    • 4.0.5-1build3
    • 4.0.5-1build4
    • 4.0.5-1build5
    Affected ranges
    • ECOSYSTEM: < 4.0.5-1ubuntu0.1

    Update to 4.0.5-1ubuntu0.1

  • transmission Ubuntu:25.10

    Versions
    • 4.0.6+dfsg-3ubuntu2
    • 4.1.0~beta2+dfsg-3ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4.1.0~beta2+dfsg-3ubuntu1.1

    Update to 4.1.0~beta2+dfsg-3ubuntu1.1

  • transmission Ubuntu:26.04:LTS

    Versions
    • 4.1.0~beta2+dfsg-3ubuntu1
    • 4.1.0~beta2+dfsg-3ubuntu2
    • 4.1.0~beta4+dfsg-1ubuntu1
    • 4.1.0~beta5+dfsg-1ubuntu1
    • 4.1.0+dfsg-1ubuntu1
    • 4.1.1+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4.1.1+dfsg-1ubuntu1.1

    Update to 4.1.1+dfsg-1ubuntu1.1

Original sources

Check your server →