CVE-2026-123029: high-severity vulnerability in Wowza Streaming Engine
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.4%
Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza Streaming Engine process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Wowza · Streaming EngineRelated CVEs — Wowza Streaming Engine
In the same product, most dangerous first.
CVE-2024-52055HIGHApplication Copy Path Traversal in Wowza Streaming EngineEPSS 1.0%CVE-2024-52054MEDIUMApplication Creation Path Traversal in Wowza Streaming EngineEPSS 0.7%CVE-2024-52056MEDIUMApplication Delete Path Traversal in Wowza Streaming EngineEPSS 0.7%CVE-2024-52053HIGHStored Cross-Site Scripting in Wowza Streaming EngineEPSS 0.7%CVE-2024-52052CRITICALStream Target Remote Code Execution in Wowza Streaming EngineEPSS 0.5%