CVE-2026-45418

Name of the Vulnerable Software and Affected Versions ClipBucket v5 versions prior to 5.5.3

Description An authenticated user with video upload privileges can exploit a boolean-based blind SQL injection, a technique where data is exfiltrated by observing true or false responses from the server. The issue exists in the subtitle editing feature when processing the "POST /actions/subtitle edit.php" endpoint, specifically through the number parameter. This allows an attacker to infer and extract sensitive information from the database due to improper input sanitization.

Recommendations Update to version 5.5.3.