EUVD-2026-60448

An issue in OSSRS SRS Simple Realtime Server v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration security.enabled, SrsSecurity::check, trunk/src/app/srsappsecurity.cpp, and SRS RTMP listener components...

CVE-2026-68004

Affected software: OSSRS SRS (Simple Realtime Server) versions before 5.0.213. Root cause: when vhost.security is disabled (or security.enabled is off) and no other publish authentication is configured, the SrsSecurity::check() path in trunk/src/app/srs_app_security.cpp is bypassed, allowing unau...

CVE-2026-34374

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the Liveschedule::keyExists method constructs a SQL query by interpolating a stream key directly into the query string without parameterization. This method is called as a fallback from LiveTransmition::keyExists...