CVE-2026-111839: Missing Authorization in VideoWhisper.com Broadcast Live Video

This vulnerability in VideoWhisper.com Broadcast Live Video arises from missing authorization checks due to incorrectly configured access control security levels. It affects all versions from the initial release up to and including 7.3.7. The issue could allow unauthorized users to access functionality or data that should be restricted. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, impacting confidentiality with no impact on integrity or availability.

The vulnerability allows unauthorized remote attackers to gain access to certain features or data within the Broadcast Live Video product, potentially leading to limited confidentiality loss. There is no impact on integrity or availability reported. No active exploitation in the wild is known at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the affected application and reviewing access control configurations may help reduce risk.