Leaderboard

Did you get a message in your logs or console that your system had been breached or was your server shutdown? I'm not trying to deflect here, but the "X-Forwarded-For" issue is only 1 part of 3 that would have let a hacking in. The "X-Forwarded-For" part in this is allowing a remote person to look local. That's all it really does. Part 2 is the Admin of the system didn't have the top or bottom option enabled for an account with management permissions. The admin might have thought it was ok to show the admin account on the local network for quick login on different devices. With the header exploit the hacker can now appear to be a local IP address and would see different local logins which at least one of them had management permissions. The hacker would probably not be able to tell a normal from admin account until named "manager", "sysop", "admin", "god", "root" or similar but it really doesn't matter as the hacker will try to login to each account shown to him. At this point he had a valid login (maybe with management permissions). Part 3 is the final needed part of this. When setting up any admin account there was no password created OR had this option enabled on the admin account. With either the Don't require or no password set, the hacker does nothing but click on the user to gain access to the system. Take away is don't use your admin account for daily media playback but reserve it for admin use only. Set a good password on admin accounts. Use the HIDE options so admin accounts do not show up for quick log ins. Options: Make sure all accounts have passwords or at least PINs (normal accounts). Don't use your admin account for general media playback but reserve it for management tasks. Assign yourself a 2nd account used for general use. Consider setting the admin account so it can only be used by a couple Emby Theater installations you have setup. If allowing a login without PIN or PASSWORD on a local account (for use by young kids, grandparents, babysitter, guest) make sure they have no destructive permissions such as being able to delete media. Assume this account can be easily breached as anyone on your LAN can use it.

@LukeAre there any updates to this yet , fingers crossed.

Here is the latest list of versions for Emby software across the server and clients. Emby Server Stable: v4.9.3.0 (2026/01/08) Release Notes Beta: v4.10.0.8 (2026/03/27) Release Notes For other platforms, please refer to the download page. Emby for Android TV Google Devices Stable: v2.1.23 (2025/12/27) Beta: v2.1.44 (2026/03/18) Amazon Devices Stable: v2.1.23 (2025/12/27) Beta: v2.1.44 (2026/03/18) Stable Release Notes Beta Release Notes Universal Android app Stable: v3.5.16 (2026/01/26) Beta: v3.5.31 (2026/03/24) Release Notes Download the latest Beta here. Emby for Kodi See here for the latest information. Emby for Roku Stable: v4.1.54 (2026/01/12) Release Notes Beta: v4.1.58 (2026/03/27) Release Notes Emby for Windows (Windows Store for PC & Xbox One) Stable Release Notes Beta release notes Emby for Linux Beta Release Notes Emby for Samsung Smart TV (Orsay) E-series to H-series TVs only Stable: v2.3.1 (2026/01/29) Beta: v2.2.3 Release Notes Emby Theatre for Samsung Smart TV (Tizen & Orsay) Stable: v2.3.4 (2026/03/23) Release Notes Emby Theatre for LG Smart TV Stable: 1.0.50 (2026/01/19) Emby for iOS Stable: v2.2.51 (2026/03/06) Stable Release Notes Beta: v2.2.34 (2025/01/10) Beta Release Notes Emby for Apple TV Stable: v2.0.3 (2025/12/26) Announcement Beta: v2.0.5 (2026/03/05) Release Notes Emby for tvOS (Apple TV) Stable: 2.1.6 (2022/12/23) Release Notes - TBA Beta: 1.5.1 (10) (2021/03/02) Beta Release Notes Emby For MacOS Stable: 2.1.6 (2022/05/09) Details here. I will keep this post up-to-date as much as possible, but please send me a PM about anything I haven't updated, or is missing. Special thanks to @Borskfor supplying a lot of the updated information. Thanks.

Could you allow users to customize the order of movies in collections instead of only having it by alphabetical or by release date? Example: I want to have a collection of Batman movies, both animated and motion pictures but want the motion pictures together followed by all the animated ones. With the current order options, this isn't possible. Thanks!

Can the developers please add a feature to verify the integrity of video files? I have over 6,000 movies in my collection and most of them play okay but I just tried to play Casper tonight and it stopped after about 6 minutes. The file itself is corrupt on the hard drive not because of an issue with Emby. I looked online to see if the entire collection can be scanned through to see which files need replacing and found it can be done with ffmpeg. I'm not familiar enough with ffmpeg to know if this works but i found this code on StackExchange by a user called Adrian. find . -regex ".*\.\(avi\|mkv\)" | while read f; do ffmpeg_out=$(ffmpeg -hide_banner -nostdin -v error -i "$f" -f null - 2>&1) [[ $ffmpeg_out ]] && echo -e "==> ERROR in $f\n${ffmpeg_out}" done Would this actually work to find and report corrupted video files? Can this feature please be implemented?

Love the new radiance blue theme Can we get the option to set the default user theme globally in the admin dashboard?

It would be great if i could set the server to delete certain shows after a user has watched it. I happen to watch "The Daily Show with Jon Stewart" and "The Colbert Report", everyday, and with "News"ish type shows, there is no need to keep the episodes around. So i would like to set MB to auto delete those 2 shows, 3 days after one user has watched it.

One thing that bothers me a little about Emby is not being able to remove the outline of the subtitles, I prefer them without an outline. Is there any version of Emby or addon that allows this adjustment, whether it's for Emby on Mi Box, Emby Theater, or Emby server? Thank you very much.

Et tu essayes de convertir sur un téléphone c'est ça ? @Joker_1 ? Si tu essayes de convertir depuis le navigateur web, regarde voir avec les outils de débugage (F12) s'il n'y a pas une erreur

Tu as pensé à regarder les logs du serveur quand ça fail ?

Maybe post that portion of your Reverse Proxy config ? In my NGINX config as an example, I only use X-Real-IP $remote_addr - no other X-Forwarded-For header lines are needed or required - as I believe these potentially do forward client requests but I'm not an NGINX expert by any means. Emby works (and shows the WAN IP) perfectly well with just the X-Real-IP config. To note, if your server was compromised, then they passed through your 1st line of defense - so you need to review that configuration asap - as that vulnerability/weakness is still there - it is not related to emby.

Nothing to do with adding to Favorites, but you can use the 'Playback Reporting' plugin and its "Played" feature to see this information: You can see if a user has watched any or all of a particular series or season.

Hi, I unbanned your old account "alpoinacan" and set force reset so you change your password.

Yes it was.

It is possible to configure a reverse proxy to not set but simply pass these headers as given by the client. It is also possible to configure a reverse proxy to not pass the client ip at all, while itself is also within the same lan as the emby instance. Both of these would allow WAN clients to appear as if they are LAN clients either intentionally or simply by default due to the misconfiguration. It's unlikely that either are the case, but they are a possibility. If you had been directly affected by the attack, your server would not have started after installing update 4.7.13.0.

At the moment when browsing the channels in Emby, you have to scroll all the way to the bottom of this list to locate radio channels and there is nothing to indicate whether or not a channel is radio without knowing so beforehand. This is a it inconvenient, so would it be possible to separate them in some form i.e. having a 'Live TV' AND 'Live Radio' button in the sidebar; Kodi for example does this.

@Abobadercan you check this for him?

Not everybody believes in that - but I do. I can't say whether it will have a sensational or just moderate effect, but at minimum it will be solid and noticeable. When looking at history it's a kind of weird picture anyway: MB started as a companion to WMC, which was strong in TV but had its shortcomings in management of non-tv media. WMC was architected for local single-user deployment (with a flaky extender concept). MB filled all those gaps but when WMC fell out of the picture, it couldn't provide an adequate replacement for the live TV part (well - it's a complex subject without doubt). Some say - nobody would be interested in all those TV features as the world has moved on and nobody would want these things anymore, rather looking for "modern apps" which are like "N-flix" and Co. - I'm sure the latter part is generally valid, the world is changing rapidly in many ways. Broadcast TV - somewhat - but not that fast, it's still a strong component in media consumption all over the world and what I doubt strongly is that nobody would be interested anymore in a TV experience like WMC had offered. It's rather that nobody's doing it because there is nothing like it available anymore. Many half-baked solutions exist, some better some worse but nothing getting really close while at the same time covering all the new "more modern" demands. To me it even appears to be that the market of TV applications is very similar to the pre-WMC situation. Everything a bit more advanced, but there are those single/local TV apps (like DVBViewer etc.) which still do the same like they always did, and then there are some more htpc-style applications but each with their own sets of drawbacks and weaknesses. Regarding the latter ones - Emby is way better than every single one of them.....if you don't count TV..... This is what TVnext is intended for making a change to: getting ahead of the competition in the one area which has always been its weakest.

Further to the solution, should anyone have the same issue: I ended up moving away from the dynamic user to get rid of the read-only issue. I shut down emby-server and used sudo systemctl edit emby-server.service to add the following in the space provided, which will override the default settings: [Service] DynamicUser=false I then used the normal process for adding a user account named 'emby' that is in the 'media' group. Next I made everything under my media directory chown emby:media and also chmod 775. Finally I used sudo systemctl start emby-server.service to restart the service. It came up, and was able to write to the media directory and everything under it (for .bif files and the like).

sounds great. look forward to engaging with the beta again. in answer to a question on another thread, i believe tvnext will be emby's usp when implemented

A more serious answer: The primary question is not about when it will get into stable, it's about when it will get into public beta That's the next required step Realistically, a duration of at least 6 months in public beta is required (4.8 is pending for 2 years now, even without a major feature change) TVnext is switchable via command line switch now which means It won't be required to make a hard switch from one beta to the next The experience of beta users won't be disrupted - they can choose a point in time to look into migrating Switchability is not meant to be a mechanism for stable, but it's perfect for the betas. Eventually, this invalidates arguments and concerns around transition, compatibility and possible risks involved all transitioning can happen smoothly, I hope that we can get into a public TVnext beta after the 4.8 release - it's really time to go forward now

How about this? Under app settings > playback > advanced, separate out and create “Match Video Resolution” function from “Enable Display Refresh Rate Switching” so that these two settings can be selected independent of each other as with ATV.

I for one (and not the only one) am looking forward to TVNext @softworkz

Dunno if you pushed out a fix, but I just noticed today that it's working again. @jang430@horstepipe

Hi, I have a request. Is it possible to support all kind of lists from TMDB and not only movie sets? Now, let's say I make a collection in Emby and add the TheMovieDb Id of it. For example I add 8091, the Alien Collection, then Emby adds the link in the interface https://www.themoviedb.org/collection/8091 Any chance to include support for all kind TMDB Lists too? Basically support not only tmdbcolid, but something like tmdblistid too? For example if I set the TheMovieDb List Id as 10, the Top 50 Grossing Films of All Time, then Emby would add this link in the interface https://www.themoviedb.org/list/10 Now it opens the link below and it is not what I would like to be opened. https://www.themoviedb.org/collection/10 TMDB lists are very powerful and a good asset for my own custom Emby collections. Thank you in advance.

Thank you for you reply. I understand that this is definately not a top priority feature request. So I made a javascript script myself for that. You can add any custom link you want to any collection with it. I am basically changing my request:) Allow Emby to add any kind of custom link user wants to a collection... No need to bother with ids etc, just allowing to add custom http links for collections. The link could be a TMDB list, a user created Trakt list that updates regurally, an IMDB link, a TVDB list link (btw TVDB seems to be the only site that releases official lists of franchises) so user would be able to be informed from his links about new items he could add to his lists. I created a script for myself for that, but obviously I would prefer being able to do that directly to Emby without the need of scripts. This is my script, it includes custom links of DC Extended Universe and Marvel Cinematic Universe to TheMovieDb, Trakt and TheTVDB. The inventory variable can be edited and add any kind of collections and links user wants. I hope someday I want need this script and I would be able to do that directly in Emby:) Thank you again for your reply Luke. // ==UserScript== // @name Emby - Collection Custom Links // @version 1.0.0 // @namespace http://tampermonkey.net/ // @require http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js // @require https://gist.github.com/raw/2625891/waitForKeyElements.js // @include *:8096/web/index.html* // @grant none // ==/UserScript== waitForKeyElements ("h1.itemName-primary", index); function index(jNode) { var inventory = [ { 'name': 'DC Extended Universe', 'TheMovieDb': 'https://www.themoviedb.org/list/3', 'Trakt': 'https://trakt.tv/users/mende666/lists/dc-extended-universe-regular-updates?sort=released,asc', 'TheTVDB': 'https://thetvdb.com/lists/dc-extended-universe' }, { 'name': 'Marvel Cinematic Universe', 'TheMovieDb': 'https://www.themoviedb.org/list/1', 'Trakt': 'https://trakt.tv/users/donxy/lists/marvel-cinematic-universe?sort=released,asc', 'TheTVDB': 'https://thetvdb.com/lists/marvel-cinematic-universe' }, ]; matchItemInfo(inventory); } async function matchItemInfo(inventory){ let CustomLinks = document.querySelectorAll("div[is='emby-scroller']:not(.hide) #embyCollectionCustomLink")[0]; if (CustomLinks) { return; } let itemInfo = await getItemInfo(); if (itemInfo === undefined || itemInfo === null) { return; } let itemType = itemInfo.Items[0].Type; if (itemType !== 'BoxSet') { return; } let itemName = itemInfo.Items[0].Name; if (itemName === undefined || itemName === null) { return; } let item = inventory.find(function findItem(item) {return item.name === itemName;}); if (item === undefined || item === null) { return; } var links = ''; for (var key in item) { if (item.hasOwnProperty(key)) { if (key !== 'name') { if (key !== '' && item[key] !== '') { links += '<a id="embyCollectionCustomLink" is="emby-linkbutton" class="raised item-tag-button nobackdropfilter emby-button" href="' + item[key] + '" target="_blank"><i class="md-icon button-icon button-icon-left">link</i>' + key + '</a>'; } } } } if (links === '') { return; } var linkName = document.querySelectorAll(".sectionTitle")[14]; if (linkName === undefined || linkName === null) { linkName = 'Links'; } else { linkName = linkName.textContent; } let linksSection = document.querySelectorAll("div[is='emby-scroller']:not(.hide) .linksSection")[0]; if (linksSection) { let html = '<h2 class="sectionTitle padded-left padded-right" style="margin-bottom:.4em;">' + linkName + '</h2><div class="itemLinks padded-left padded-right focusable" data-focusabletype="nearest">' + links + '</div>'; linksSection.insertAdjacentHTML('afterend', html); } } async function getItemInfo(){ let itemId = /\?id=(\d*)/.exec(window.location.hash)[1]; let accessToken = ApiClient.accessToken(); let serverAddress = ApiClient._serverAddress; let userId = ApiClient._serverInfo.UserId; if (accessToken === undefined || accessToken === null) { return; } if (serverAddress === undefined || serverAddress === null) { return; } if (itemId === undefined || itemId === null) { return; } let itemUrl = serverAddress + '/emby/Items?Ids=' + itemId + '&X-Emby-Token=' + accessToken let response = await fetch(itemUrl); if (response.ok) { return await response.json(); } else { return; } }

The Trailers tab can not be disabled by removing the trailers plugin, and there's no way to avoid a trailer button on an item once the metadata fetcher for that item retrieves a youtube trailer link (except on the Roku app, but only because of Roku platform rule/limitation). Both of those things should be the case though and have been requested and now have been requested again in this thread. @grnmchYes, this behavior has been around a long time. I'm not sure why everyone is fixating on that instead of discussing options for disabling/improving it.

It's not Voldemort you can say Jellyfin

Newer smb versions will be supported in the upcoming 4.8 server release, however my advice about mounting still stands. Thanks.

Yes it has.

Hi everyone... I am running EMBY Premiere 4.7.11. I have a 32 in TCL Roku and a 40 in TCL Roku TVs. I have an nVidia Shield Pro on our MAIN entertainment system. BOTH TCL tvs are currently doing exactly that, stalling on a black screen and will not advance to the next episode automatically. The problem does NOT exist with the nVidia based system. After reading through this post, the last entry says the problem is supposed to have been addressed in EMBY Server v 4.7.8. Could someone please advise what would be required for me to provide in order to troubleshoot the issue? Thanks in advance all!!! Gerry

Not needed. I'm seeing the issue.

Yea koodo looks interesting. But actually that's an entire application, so embedding just the reader might not be possible.

Hi, yes this is certainly possible for future updates. Thanks for the feedback.