CVE-2026-105486

HIGH

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 8.0-d0 mitigates this issue. The patch is named bb5fde228f4ca5bd26d96368b61f6e0c21df51df. The affected component should be upgraded.

CVSS v3.1 Score

7.3
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW
Published: 10/6/2026Modified: 10/6/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-105486 — A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the functio...

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 8.0-d0 mitigates this issue. The patch is named bb5fde228f4ca5bd26d9

CVE-2026-105486
NIST NVD

References (9)

https://github.com/ossrs/srs/https://github.com/ossrs/srs/commit/bb5fde228f4ca5bd26d96368b61f6e0c21df51dfhttps://github.com/ossrs/srs/issues/4690https://github.com/ossrs/srs/pull/4726https://github.com/ossrs/srs/releases/tag/v8.0-d0https://vuldb.com/cve/CVE-2026-105486https://vuldb.com/submit/986193https://vuldb.com/vuln/413620https://vuldb.com/vuln/413620/cti