PT-2026-137418

CVE-2026-123029

·

Published

2026-11-05

·

Updated

2026-11-05

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza Streaming Engine process.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-611: Improper Restriction of XML External Entity Reference
Related identifiers
CVE-2026-123029
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com