Kaltura

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 25, 2026
Last mentionedAug 26, 2026

Timeline

2 articles · newest first

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

CERT/CC disclosed unpatched Kaltura mwEmbed flaws CVE-2026-19913 and CVE-2026-19912 allowing unauthenticated file reads and remote code execution.

The Hacker NewsAug 26, 11:55 UTC · Aug 26, 2026VulnerabilityCVE-2026-19913 CVE-2026-199122

VU#308749: Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers

Insecure deserialization in Kaltura's legacy HTML5 Player V2 (mwEmbed) allows arbitrary file read and remote code execution; Player V7 is unaffected.

CERT/CC Vulnerability NotesAug 25, 16:11 UTC · Aug 25, 2026Vulnerability2 · 1 read

Related CVEs

by mentions

CVE-2026-19912<1%9.8
Unauthenticated RCE in Kaltura mwEmbed HTML5 Player
published Aug 25, 2026Kaltura mwEmbed HTML5 player (html5lib)
CVE-2026-19913<1%7.5
Unauthenticated Local File Disclosure in Kaltura HTML5 Player (mwEmbed)
published Aug 25, 2026Kaltura html5lib / mwEmbed HTML5 player (mwEmbedLoader.php)

Appears with

CERT/CCvendor · 2
KalturaClientBaseproduct · 1
mwEmbedproduct · 1
Kaltura HTML5 Player V2product · 1
html5libproduct · 1
CERT/CCorganization · 1
Kaltura Player V7product · 1
The Hacker Newsorganization · 1

Entities are extracted by the model from each article. First seen Aug 25, 2026, last mentioned Aug 26, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.