https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:52:38.511865+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-20035 CVE-2016-20035 — Wowza Streaming Engine 4.5.0 CSRF via user edit endpoint 2026-10-08T20:52:38.514249+00:00

Affected: Wowza Media Systems, LLC. Wowza Streaming Engine

Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages. Attackers can trick logged-in administrators into visiting a malicious site that submits POST requests to the user edit endpoint to create new admin accounts with arbitrary credentials.