https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:39:09.469098+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-27737 CVE-2026-27737 — BigBlueButton has Stored XSS in bbb-playback replay 2026-10-06T22:39:09.512285+00:00

Affected: bigbluebutton, blindsidenetworks scalite, bigbluebutton bbb-playback

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.19, the recording playback (presentation format) was not sanitizing user's input in public chat. This allowed for a malicious actor to craft and carry out a targeted XSS attack, activated on anyone replaying the recording. This issue has been fixed 3.0.19.