CVE-2026-73211

creationtimestamp| type| source ---|---|--- 2026-08-11 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstf5i3m352d...

CVE-2026-73211 PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()

PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTube database tables, including...