CVE-2026-73039

CVE-2026-73039 affects the Streama application, via an insecure direct object reference in the ViewingStatusController. The underlying issue allows authenticated users to read and delete other users’ viewing status records, enabling enumeration of all users’ watch progress, deletion of arbitrary ...