https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T14:24:51.136307+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-105486 CVE-2026-105486 — OSSRS srs System API api.go systemAPI.Run missing authentication 2026-10-07T14:24:51.138023+00:00

Affected: OSSRS srs

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 8.0-d0 mitigates this issue. The patch is named bb5fde228f4ca5bd26d96368b61f6e0c21df51df. The affected component should be upgraded.