11 matches found
CVE-2026-68004
CVE-2026-68004：SRS Unauthenticated RTMP Publish Overview This repository contains the technical report and proof-of-concept for CVE-2026-68004, an unauthenticated RTMP publish issue in OSSRS / SRS deployments where vhost.security is disabled and no other publish authentication is configured. File...
SRS - Command Injection
SRS's v5.0.137v5.0.156, v6.0.18v6.0.47 api-server server is vulnerable to a drive-by command injection. id: CVE-2023-34105 info: name: SRS - Command Injection author: iamnoooob,rootxharsh,pdresearch severity: high description: | SRS's v5.0.137v5.0.156, v6.0.18v6.0.47 api-server server is vulnerab...
CVE-2026-68004
An issue in OSSRS SRS Simple Realtime Server v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration security.enabled, SrsSecurity::check, trunk/src/app/srsappsecurity.cpp, and SRS RTMP listener components...
CVE-2026-68004
An issue in OSSRS SRS Simple Realtime Server v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration security.enabled, SrsSecurity::check, trunk/src/app/srsappsecurity.cpp, and SRS RTMP listener components...
CVE-2026-68004
An issue in OSSRS SRS Simple Realtime Server...
EUVD-2026-60448
An issue in OSSRS SRS Simple Realtime Server v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration security.enabled, SrsSecurity::check, trunk/src/app/srsappsecurity.cpp, and SRS RTMP listener components...
CVE-2026-68004
OSSRS SRS (Simple Realtime Server) versions
CVE-2026-68004: Improper Access Control
An issue in OSSRS SRS Simple Realtime Server...
PT-2026-76773
An issue in OSSRS SRS Simple Realtime Server v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration security.enabled, SrsSecurity::check, trunk/src/app/srs app security.cpp, and SRS RTMP listener components...
CVE-2026-68004
An issue in OSSRS SRS Simple Realtime Server v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration security.enabled, SrsSecurity::check, trunk/src/app/srsappsecurity.cpp, and SRS RTMP listener components...
