CVE-2026-68004

Affected software: OSSRS SRS (Simple Realtime Server) versions before 5.0.213. Root cause: when vhost.security is disabled (or security.enabled is off) and no other publish authentication is configured, the SrsSecurity::check() path in trunk/src/app/srs_app_security.cpp is bypassed, allowing unau...