Kaltura vulnerabilities
We track 2 vulnerabilities in Kaltura products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Kaltura vulnerabilities
- 7.5 High severity
The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability…
The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This parameter is used as the base URL for a backend request and accepts non‑HTTP schemes
- 9.8 Critical severity
The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code…
The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled ServiceUrl, whose resp