Known Vulnerabilities for Streaming Engine by Wowza
Listed below are 10 of the newest known vulnerabilities associated with "Streaming Engine" by "Wowza".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123029 json | Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with ... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-121416 json | SurrealDB 2.0.0 before 3.3.1 does not enforce --deny-funcs restrictions on method-style function calls in the streaming engin... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-96561 json | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scrip... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-56838 json | PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks defa... | Not Provided | 2026-10-23 | 2026-10-29 |
| CVE-2021-35492 json | Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources via the... | 6.5 - MEDIUM | 2021-10-05 | 2022-07-12 |
| CVE-2021-35491 json | A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to dele... | 8.1 - HIGH | 2021-10-05 | 2021-11-06 |
| CVE-2021-31540 json | Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the... | 7.1 - HIGH | 2021-04-23 | 2021-12-03 |
| CVE-2021-31539 json | Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password ... | 5.5 - MEDIUM | 2021-04-23 | 2021-12-08 |
| CVE-2020-9004 json | A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only us... | 8.8 - HIGH | 2020-04-14 | 2022-05-03 |
| CVE-2019-19456 json | A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Strea... | 6.1 - MEDIUM | 2020-05-18 | 2020-09-30 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wowza | Streaming Engine | 4.8.5 | |||
| Application | Wowza | Streaming Engine | 4.8.0 | |||
| Application | Wowza | Streaming Engine | 4.7.8 | |||
| Application | Wowza | Streaming Engine | 4.7.7 | |||
| Application | Wowza | Streaming Engine | 4.7.6 | |||
| Application | Wowza | Streaming Engine | 4.7.5 | |||
| Application | Wowza | Streaming Engine | 4.7.4.0.1 | |||
| Application | Wowza | Streaming Engine | 4.7.4 | |||
| Application | Wowza | Streaming Engine | 4.7.3 | |||
| Application | Wowza | Streaming Engine | 4.7.1 | |||
| Application | Wowza | Streaming Engine | 4.7.0 | |||
| Application | Wowza | Streaming Engine | 4.6.0 | |||
| Application | Wowza | Streaming Engine | 4.5.0 | |||
| Application | Wowza | Streaming Engine | 4.4.1 | |||
| Application | Wowza | Streaming Engine | 4.4.0 | |||
| Application | Wowza | Streaming Engine | 4.3.0 | |||
| Application | Wowza | Streaming Engine | 4.2.0 | |||
| Application | Wowza | Streaming Engine | 4.1.2 | |||
| Application | Wowza | Streaming Engine | 4.1.1 | |||
| Application | Wowza | Streaming Engine | 4.1.0 |