https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:28:40.900342+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-231617 EUVD-2026-231617 2026-10-08T18:28:40.903343+00:00 EUVD-2026-231617 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41960 fkie_cve-2022-41960 2026-10-08T18:28:40.903374+00:00

BigBlueButton is an open source web conferencing system. Versions prior to 2.4.3, are subject to Insufficient Verification of Data Authenticity, resulting in Denial of Service. An attacker can make a Meteor call to `validateAuthToken` using a victim's userId, meetingId, and an invalid authToken. This forces the victim to leave the conference, because the resulting verification failure is also observed and handled by the victim's client. The attacker must be a participant in any meeting on the server. This issue is patched in version 2.4.3. There are no workarounds.

 https://cve.radiocsirt.org/vuln/gsd-2022-41960 gsd-2022-41960 2026-10-08T18:28:40.903408+00:00 gsd-2022-41960 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2350 WID-SEC-W-2022-2350 — BigBlueButton: Mehrere Schwachstellen 2026-10-08T18:28:40.903420+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in BigBlueButton ausnutzen, um Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.