Skip to content
OpenAdvisories

Product · streamaserver

streama

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-73039

    streama Insecure Direct Object Reference via ViewingStatusController

    streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary viewing h…

    streamaserver streama