{"uuid": "9d4fd86f-3e1f-48a3-937c-61d99d532e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "seen", "source": "https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html", "content": "The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a server and execute code on it.\n\nThe flaws, tracked as CVE-2026-19913 and CVE-2026-19912, both stem from the same unsafe deserialization in the mwEmbedLoader.php endpoint of the mwEmbed player", "creation_timestamp": "2026-08-26T16:00:49.631026Z"}