Threats affecting pkg:maven/com.wowza/streaming-engine

CVE-2026-123029 is a vulnerability in Wowza Streaming Engine versions before 4.12.2 that allows remote attackers to read local files via XML external entity processing. This occurs because the software improperly restricts XML external entity references, enabling unauthorized file access with the privileges of the Wowza Streaming Engine process. The issue is fixed in version 4.12.2.