What is CVE-2026-45327?

CVE-2026-45327 is a high-severity vulnerability in Datanoisetv Tinyice, classified under Missing Authentication for Critical Function. CVSS score: 8.2/10. Published 2026-06-05.

How severe is CVE-2026-45327?

High severity. CVSS v3 base score is 8.2 out of 10.

Auth bypass in Datanoisetv Tinyice

CVE-2026-45327

TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing authentication on WebRTC ingest endpoint allows unauthenticated stream injection. Version 2.5.0 fixes the issue by requiring either HTTP Basic aut…

Vulnerability class: Broken Authentication

EPSS: 0.004 (28.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L.

Affected products

Datanoisetv Tinyice — versions >= 0.8.95, < 2.5.0

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2026-45327?: CVE-2026-45327 is a high-severity vulnerability in Datanoisetv Tinyice, classified under Missing Authentication for Critical Function. CVSS score: 8.2/10. Published 2026-06-05.
How severe is CVE-2026-45327?: High severity. CVSS v3 base score is 8.2 out of 10.