Report: Latest: CVE-2026-41470 - LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session Token
CVE ID :CVE-2026-41470 Published : May 19, 2026, 7:16 p.m. | 46 minutes ago Description :LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions. Severity: 8.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...