CVE-2026-88865 in AVideoИнформация

Сводка

по VulDB • 10.09.2026

AVideo attraverso la commit c3edcc274c389816d434acadac07ee78eaf330c1 non valida la proprietà del restream in getRestream.json.php, consentendo agli utenti autenticati con il permesso canStream di creare token per restream arbitrari. Gli attaccanti possono scambiare il token per recuperare le chiavi di stream degli altri utenti da getLiveKey.json.php e pubblicarle sui loro destinazioni YouTube, Twitch o RTMP.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

VulnCheck

Резервировать

10.09.2026

Раскрытие

10.09.2026

Модерация

принято

Вход

VDB-402031

EPSS

0.00000

KEV

Нет

Деятельности

Очень низкий

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-88865
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88865
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-88865/

◂ ПредыдущийОбзорДалее ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!