Skip to content
OpenAdvisories

Product · HDInnovations

UNIT3D

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-119596

    UNIT3D through 9.2.0 Private Playlist Disclosure via Playlist Zip Download

    UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows authenticated users to download other members' private playlists. Attackers can enumerate sequential playlist ids at the /playlist-zips/{playlist} e…

    HDInnovations UNIT3D