agentprime: bigbluebuttonEvery new CVE for bigbluebutton.https://agentprime.io/CVE-2026-55489: BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-55489/https://agentprime.io/advisories/CVE-2026-55489/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:36:35 GMTCVECVE-2026-55491: BigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting Namehttps://agentprime.io/advisories/CVE-2026-55491/https://agentprime.io/advisories/CVE-2026-55491/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:35:42 GMTCVECVE-2026-46355: BigBlueButton: Unauthenticated Session Hijack via Exposed /bigbluebutton/api/handleJoinExistingUserhttps://agentprime.io/advisories/CVE-2026-46355/https://agentprime.io/advisories/CVE-2026-46355/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:34:40 GMTCVECVE-2026-46682: BigBlueButton: Blind SQL Injection AUTH (Moderator)https://agentprime.io/advisories/CVE-2026-46682/https://agentprime.io/advisories/CVE-2026-46682/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:33:56 GMTCVECVE-2026-46353: BigBlueButton API checksum bypass via presentationUploadExternalUrlhttps://agentprime.io/advisories/CVE-2026-46353/https://agentprime.io/advisories/CVE-2026-46353/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 18:06:54 GMTCVECVE-2026-46404: BigBlueButton: Presentation URL Security Hardeninghttps://agentprime.io/advisories/CVE-2026-46404/https://agentprime.io/advisories/CVE-2026-46404/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 18:04:11 GMTCVECVE-2026-46351: BigBlueButton: Insecure Randomness allows to guess user's conference session token and impersonate themhttps://agentprime.io/advisories/CVE-2026-46351/https://agentprime.io/advisories/CVE-2026-46351/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 17:58:53 GMTCVECVE-2026-27737: BigBlueButton has Stored XSS in bbb-playback replayhttps://agentprime.io/advisories/CVE-2026-27737/https://agentprime.io/advisories/CVE-2026-27737/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 May 2026 21:11:17 GMTCVECVE-2026-41127: BigBlueButton's missing authorization allows viewer to inject/overwrite captionshttps://agentprime.io/advisories/CVE-2026-41127/https://agentprime.io/advisories/CVE-2026-41127/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 23:24:46 GMTCVECVE-2026-41126: BigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"https://agentprime.io/advisories/CVE-2026-41126/https://agentprime.io/advisories/CVE-2026-41126/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 23:22:34 GMTCVECVE-2026-27736: BigBlueButton has Open Redirect vulnerability in ApiControllerhttps://agentprime.io/advisories/CVE-2026-27736/https://agentprime.io/advisories/CVE-2026-27736/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Feb 2026 16:27:01 GMTCVECVE-2026-27467: BigBlueButton: Audio from participants to the server initially unmutedhttps://agentprime.io/advisories/CVE-2026-27467/https://agentprime.io/advisories/CVE-2026-27467/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 21 Feb 2026 07:18:26 GMTCVECVE-2026-27466: BigBlueButton: Exposed ClamAV port enables Denial of Servicehttps://agentprime.io/advisories/CVE-2026-27466/https://agentprime.io/advisories/CVE-2026-27466/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 21 Feb 2026 07:14:49 GMTCVECVE-2025-61602: BigBlueButton vulnerable to Chat DoS via invalid reactionEmojiIdhttps://agentprime.io/advisories/CVE-2025-61602/https://agentprime.io/advisories/CVE-2025-61602/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 20:40:04 GMTCVECVE-2025-61601: BigBlueButton vulnerable to DoS via PollSubmitVote GraphQL mutationhttps://agentprime.io/advisories/CVE-2025-61601/https://agentprime.io/advisories/CVE-2025-61601/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 20:29:25 GMTCVECVE-2025-55200: BigBlueButton vulnerable to Stored XSS via name of user at Shared Noteshttps://agentprime.io/advisories/CVE-2025-55200/https://agentprime.io/advisories/CVE-2025-55200/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 18:51:57 GMTCVECVE-2024-39302: Some bbb-record-core files installed with wrong file permissionhttps://agentprime.io/advisories/CVE-2024-39302/https://agentprime.io/advisories/CVE-2024-39302/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Jun 2024 20:51:59 GMTCVECVE-2024-38518: bbb-web API additional parameters consideredhttps://agentprime.io/advisories/CVE-2024-38518/https://agentprime.io/advisories/CVE-2024-38518/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Jun 2024 20:25:40 GMTCVECVE-2023-43798: BigBlueButton Blind SSRF When Uploading Presentation (mitigation bypass)https://agentprime.io/advisories/CVE-2023-43798/https://agentprime.io/advisories/CVE-2023-43798/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Oct 2023 22:24:59 GMTCVECVE-2023-43797: BigBlueButton Stored Cross-site Scripting vulnerability at Guest Lobbyhttps://agentprime.io/advisories/CVE-2023-43797/https://agentprime.io/advisories/CVE-2023-43797/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Oct 2023 22:18:11 GMTCVECVE-2023-42804: BigBlueButton Path Traversal – Reading Certain File Extensionshttps://agentprime.io/advisories/CVE-2023-42804/https://agentprime.io/advisories/CVE-2023-42804/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Oct 2023 18:14:41 GMTCVECVE-2023-42803: BigBlueButton Unrestricted File Upload vulnerabilityhttps://agentprime.io/advisories/CVE-2023-42803/https://agentprime.io/advisories/CVE-2023-42803/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Oct 2023 18:11:35 GMTCVECVE-2023-33176: Blind SSRF When Uploading Presentation in BigBlueButtonhttps://agentprime.io/advisories/CVE-2023-33176/https://agentprime.io/advisories/CVE-2023-33176/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jun 2023 19:50:25 GMTCVECVE-2022-23488: BigBlueButton vulnerable to Insertion of Sensitive Information Into Sent Datahttps://agentprime.io/advisories/CVE-2022-23488/https://agentprime.io/advisories/CVE-2022-23488/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Dec 2022 00:28:46 GMTCVECVE-2022-23490: Improper access control to polling voteshttps://agentprime.io/advisories/CVE-2022-23490/https://agentprime.io/advisories/CVE-2022-23490/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Dec 2022 21:02:30 GMTCVECVE-2022-41964: BigBlueButton contains Response leaks in anonymous pollshttps://agentprime.io/advisories/CVE-2022-41964/https://agentprime.io/advisories/CVE-2022-41964/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Dec 2022 17:17:15 GMTCVECVE-2022-41963: BigBlueButton contains Improper Preservation of Permissions for whiteboardhttps://agentprime.io/advisories/CVE-2022-41963/https://agentprime.io/advisories/CVE-2022-41963/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Dec 2022 13:00:42 GMTCVECVE-2022-41962: BigBlueButton contains Incorrect Authorization for setting emoji statushttps://agentprime.io/advisories/CVE-2022-41962/https://agentprime.io/advisories/CVE-2022-41962/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Dec 2022 12:45:06 GMTCVECVE-2022-41961: BigBlueButton subject to Ineffective user banshttps://agentprime.io/advisories/CVE-2022-41961/https://agentprime.io/advisories/CVE-2022-41961/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Dec 2022 12:24:43 GMTCVECVE-2022-41960: BigBlueButton contains DoS via failed authToken validationhttps://agentprime.io/advisories/CVE-2022-41960/https://agentprime.io/advisories/CVE-2022-41960/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Dec 2022 23:56:26 GMTCVECVE-2022-31064: Cross site scripting in username that will trigger by sending chathttps://agentprime.io/advisories/CVE-2022-31064/https://agentprime.io/advisories/CVE-2022-31064/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jun 2022 19:50:14 GMTCVECVE-2022-31065: Cross site scripting vulnerability for private chat in bigbluebuttonhttps://agentprime.io/advisories/CVE-2022-31065/https://agentprime.io/advisories/CVE-2022-31065/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jun 2022 19:45:21 GMTCVECVE-2022-29235: Limited data exposure for shared external videos in BigBlueButtonhttps://agentprime.io/advisories/CVE-2022-29235/https://agentprime.io/advisories/CVE-2022-29235/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 23:25:18 GMTCVECVE-2022-29236: Improper access control for pencil annotations in BigBlueButtonhttps://agentprime.io/advisories/CVE-2022-29236/https://agentprime.io/advisories/CVE-2022-29236/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 23:25:12 GMTCVECVE-2022-29234: Grace period for lock settings in public/private chats in BigBlueButtonhttps://agentprime.io/advisories/CVE-2022-29234/https://agentprime.io/advisories/CVE-2022-29234/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 23:20:14 GMTCVECVE-2022-29233: Improper access control for breakout rooms in BigBlue Buttonhttps://agentprime.io/advisories/CVE-2022-29233/https://agentprime.io/advisories/CVE-2022-29233/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 23:15:15 GMTCVECVE-2022-29232: Exposure of messages in BigBlueButton public chatshttps://agentprime.io/advisories/CVE-2022-29232/https://agentprime.io/advisories/CVE-2022-29232/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 22:25:12 GMTCVECVE-2022-29169: ReDoS on endpoint html5client/useragent in BigBlueButtonhttps://agentprime.io/advisories/CVE-2022-29169/https://agentprime.io/advisories/CVE-2022-29169/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 22:20:12 GMTCVE