CVE-2026-45327
CVE-2026-45327
TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing authentication on WebRTC ingest endpoint allows unauthenticated stream injection. Version 2.5.0 fixes the issue by requiring either HTTP Basic aut…
Vulnerability class: Broken Authentication
CVSS v3 metric
CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-45327?
- CVE-2026-45327 is a high-severity vulnerability, classified under Missing Authentication for Critical Function. CVSS score: 8.2/10. Published 2026-06-05.
- How severe is CVE-2026-45327?
- High severity. CVSS v3 base score is 8.2 out of 10.