PT-2026-43143 · Unknown · Broadcast Live Video

Ssl-6-S0D · CVE-2026-24937 · Published 2026-05-25 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Broadcast Live Video versions prior to 7.1.3

Description Improper Control of Generation of Code allows for Code Injection, which can lead to Remote Code Execution (RCE), a state where an attacker can execute arbitrary commands on the target machine.

Recommendations Update to version 7.1.3 or later.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-24937

Affected Products

Broadcast Live Video

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-24937 · Security Note
• https://t.me/CVEtracker/54919 · Telegram Post
• https://t.me/cveNotify/219902 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/videowhisper-live-streaming-integration/vulnerability/wordpress-broadcast-live-video-plugin-7-1-3-remote-code-execution-rce-vulnerability?_s_id=cve · Note