CVE-2026-108831

A security vulnerability exists in meetecho janus-gateway versions up to 1.4.2 . The issue resides within the Admin API component, specifically in the html/demos/admin.js file. The root cause is the presence of hard-coded credentials , which allows for remote execution of the attack. Public explo...

CVE-2026-108830

A race condition vulnerability exists in meetecho janus-gateway up to version 1.4.2 . The flaw is located within an unspecified part of the src/plugins/janus_videoroom.c file in the VideoRoom component. This vulnerability allows for potential remote exploitation , although the attack complexity i...

EUVD-2026-97353

A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janusvideoroom.c of the component VideoRoom. This manipulation causes race condition. Remote exploitation of the attack is possible. The attack's complexity is rated as high...

CVE-2021-4124 Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Meetecho Janus 跨站脚本漏洞

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A cross-site scripting vulnerability exists in the Meetecho janus gateway, which stems from the vulnerability of the janus-gateway to incorrect input during web page generation...

Meetecho Janus 跨站脚本漏洞

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A cross-site scripting vulnerability exists in Meetecho janus gateway, which stems from the software's lack of effective filtering and validation of user-submitted parameters...