Threats tagged 'ghsa-5cp7-fp4j-wwcv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.4	CVE-2026-116679Neko · Authorization bypass in legacy WebRTC input handling Medium5.42026-10-27GCVE DatabaseCVE-2026-116679 A logic error in the legacy WebRTC input handling of the Neko server allows authenticated room members to bypass authorization checks and send mouse and keyboard inputs even when controls are locked. This issue only affects the legacy WebRTC input path when legacy mode and implicit hosting are enabled. The modern control API remains unaffected. The vulnerability is fixed in version 0.0.0-20260805142851-395ca1a6f62b. Report on CVE-2026-116679 Vulnerability CWE-863 #ghsa-5cp7-fp4j-wwcv #go	GCVE Database	2026-10-27

Page 1 of 1