CVE-2026-107421: Session Fixation in VideoWhisper.com Broadcast Live Video

The vulnerability identified as CVE-2026-107421 affects VideoWhisper.com Broadcast Live Video versions from initial releases up to 7.3.2. It is a session fixation issue that enables an attacker to hijack user sessions by manipulating the session identifier. The CVSS 3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation of this session fixation vulnerability can lead to session hijacking, allowing attackers to impersonate legitimate users. This can result in unauthorized access to user accounts and potentially sensitive information, as well as disruption of service. The CVSS score of 7.3 indicates a high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing additional session management controls, such as regenerating session IDs after login and enforcing strict session expiration policies.