DevThe Hacker Newsabout 2 hours ago
Kaltura mwEmbed Flaws Allow File Read, Code Execution
1 min read
Two unpatched Kaltura mwEmbed vulnerabilities, CVE-2026-19913 and CVE-2026-19912, allow remote unauthenticated attackers to read arbitrary files and execute code. Both flaws stem from unsafe deserialization in the mwEmbedLoader.php endpoint of the HTML5 video player library. CERT/CC disclosed the issues.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
