https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:01:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-336800 EUVD-2026-336800 https://cve.radiocsirt.org/vuln/euvd-2026-336800 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41470 <p>LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions.</p> <p>LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41470 https://cve.radiocsirt.org/vuln/ghsa-3x7c-xg4r-972q <p>LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions.</p> <p>LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions.</p> https://cve.radiocsirt.org/vuln/ghsa-3x7c-xg4r-972q https://cve.radiocsirt.org/vuln/opensuse-su-2026:10881-1 <p>libBasicUsageEnvironment2-2026.04.22-1.1 on GA media</p> <p>libBasicUsageEnvironment2-2026.04.22-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10881-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41470 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: liblivemedia, Ubuntu:Pro:18.04:LTS: liblivemedia, Ubuntu:20.04:LTS: liblivemedia</p> <p>LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: liblivemedia, Ubuntu:Pro:18.04:LTS: liblivemedia, Ubuntu:20.04:LTS: liblivemedia</p> <p>LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41470