EUVD-2026-60448

An issue in OSSRS SRS Simple Realtime Server v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration security.enabled, SrsSecurity::check, trunk/src/app/srsappsecurity.cpp, and SRS RTMP listener components...

CVE-2026-68004

An issue in OSSRS SRS Simple Realtime Server...

CVE-2026-68004

Affected software: OSSRS SRS (Simple Realtime Server) versions before 5.0.213. Root cause: when vhost.security is disabled (or security.enabled is off) and no other publish authentication is configured, the SrsSecurity::check() path in trunk/src/app/srs_app_security.cpp is bypassed, allowing unau...