Skip to content
OpenAdvisories

Vendor

Kaltura

5 known vulnerabilities.

Products

mwEmbed 2 Kaltura HTML5 Video Player, html5lib library 1 Video Platform 1 Kaltura HTML5 Video Player, html5 library 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-19912 Public exploit

    CVE-2026-19912

    The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled ServiceUrl, whose res…

    Kaltura Kaltura HTML5 Video Player, html5 library
  • Critical 9.3
    CVE-2016-15044 Public exploit

    Kaltura < 11.1.0-2 PHP Object Injection RCE

    A remote code execution vulnerability exists in Kaltura versions prior to 11.1.0-2 due to unsafe deserialization of user-controlled data within the keditorservices module. An unauthenticated remote attacker can exploit this issue by sending a specially crafte…

    Kaltura Video Platform