CVE-2026-92780 — KnowStreaming through 3.4.1 Missing Authorization on the REST API
KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can ca…
Published: 2026-09-16 · CVSS: 8.7 · CVSS 4.0
KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call identity-management endpoints to create administrator accounts or grant themselves administrative privileges without proper authorization.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7