CVE-2026-124664mediumCWE-200

CVE-2026-124664: falha de média gravidade em Mine CloudVod

Mine CloudVod < 2.6.7 - Unauthenticated Paid Lesson Content Disclosure

Publicada em

Seguir esta CVE+ Monitorar Mine CloudVod

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

10Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3
The Mine CloudVod WordPress plugin before 2.6.7 does not check whether the requester is enrolled in a course, or authorised at all, before returning the course's full curriculum together with the raw content of every published lesson, allowing unauthenticated visitors to retrieve paid lesson content, such as direct video source URLs, and the passwords of password-protected lessons.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Unknown · Mine CloudVod
CVEs relacionadas — Mine CloudVod

No mesmo produto, das mais perigosas para as menos.

CVE-2026-124653MEDIUMMine CloudVod < 2.6.6 - Unauthenticated Cloud Storage Credential DisclosureEPSS 0.1%CVE-2026-124652MEDIUMMine CloudVod < 2.6.6 - Subscriber+ Order Information Disclosure via IDOREPSS 0.1%