CVE-2026-108830lowCWE-362

CVE-2026-108830: fallo de gravedad baja en meetecho janus-gateway

meetecho janus-gateway VideoRoom janus_videoroom.c race condition

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear janus-gateway+ Monitorear janus

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 2.3epss 0.2%
A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the component VideoRoom. This manipulation causes race condition. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. Patch name: 27c0d1af888153e818675b56a4e6267f62d57097. Applying a patch is the recommended action to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
meetecho · janus-gateway
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — meetecho janus-gateway

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-110717MEDIUMJanus WebRTC Server through 1.4.3 Path Traversal via Record&Play FilenameEPSS 0.5%CVE-2026-108831MEDIUMmeetecho janus-gateway Admin API admin.js hard-coded credentialsEPSS 0.3%