Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/18 10:16 p.m.•29 views

CVE-2026-52876

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. If the mpv or VLC launch attempts are skipped or...

8.8CVSS0.002EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/18 9:29 p.m.•41 views

CVE-2026-52876

Streambert is a cross-platform Electron desktop application for streaming and downloading video content. Prior to version 2.6.0 , the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. When mpv or VLC launch attempts ...

8.8CVSS6AI score0.002EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/18 9:29 p.m.•38 views

CVE-2026-52876 Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. If the mpv or VLC launch attempts are skipped or...

8.8CVSS0.002EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/18 9:29 p.m.•24 views

CVE-2026-52876 Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. If the mpv or VLC launch attempts are skipped or...

8.8CVSS6AI score0.002EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/08/18 9:29 p.m.•18 views

CVE-2026-52876 Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. If the mpv or VLC launch attempts are skipped or...

8.8CVSS6AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•11 views

CVE-2026-52876: Improper Input Validation

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. If the mpv or VLC launch attempts are skipped or...

8.8CVSS6AI score0.002EPSS
SaveExploits0References3
Rows per page
Query Builder