Skip to content
OpenAdvisories
High · 7.5 CVE-2026-123029 EUVD-2026-117386GHSA-g54c-2vxv-4cp8

Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges…

Published Nov 5, 2026 · Updated Nov 10, 2026 · Assigned by mitre

Vendor: Wowza Product: Streaming Engine

Description

Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza Streaming Engine process.

Affected products

VendorProductAffectedFixed
Wowza Streaming Engine < 4.12.2 4.12.2

References