Audiobookshelf Audiobookshelf Mobile App — known CVE vulnerabilities

Every CVE whose affected-product data names Audiobookshelf Audiobookshelf Mobile App, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-27974 — CVSS 4.8 (medium): Audiobookshelf is a self-hosted audiobook and podcast server. A cross-site scripting (XSS) vulnerability exists in versions prior to…
• CVE-2026-27973 — CVSS 4.0 (medium): Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to…