https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:19:00.453157+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-357244 EUVD-2026-357244 2026-10-04T08:19:00.490122+00:00 EUVD-2026-357244 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55489 fkie_cve-2026-55489 2026-10-04T08:19:00.490157+00:00

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting. akka-bbb-apps/src/main/scala/org/bigbluebutton/core/apps/presentationpod/RemovePresentationPubMsgHdlr.scala did not verify the presentation's meeting identifier before deletion, allowing a presenter who knew the identifier to delete another meeting's presentation and disrupt its availability. This issue is fixed in version 3.0.29.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1916 WID-SEC-W-2026-1916 — BigBlueButton: Mehrere Schwachstellen 2026-10-04T08:19:00.490189+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in BigBlueButton ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.