CVE-2026-52877

creationtimestamp| type| source ---|---|--- 2026-08-18 23:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd3fjcln27 2026-08-19 00:01:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bvxcoaumghcko...

CVE-2026-52877

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js passes a renderer-supplied url directly to Electron's shell.openExternal without validating its protocol. A compromised renderer...

CVE-2026-52877 Streambert : Insecure Protocol Execution in open-external IPC Handler

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js passes a renderer-supplied url directly to Electron's shell.openExternal without validating its protocol. A compromised renderer...