Vendor
Kaltura
5 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.5
CVE-2026-19913
The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This parameter is used as the base URL for a backend request and accepts non‑HTTP schemes…