rootpwn

critical · CVSS v3 8.8 · CVSS v4 8.7

CVE-2026-92780

KnowStreaming versions up to 3.4.1 allow any authenticated user to call protected REST API endpoints that should be restricted to administra

Overview

KnowStreaming versions up to 3.4.1 allow any authenticated user to call protected REST API endpoints that should be restricted to administrators. This flaw lets attackers create new admin accounts or elevate their own privileges, effectively bypassing all role‑based access controls.

Description

KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call identity-management endpoints to create administrator accounts or grant themselves administrative privileges without proper authorization.

Impact

Authenticated users can gain full administrative control, compromising confidentiality, integrity, and availability of the system. This enables arbitrary data modification, unauthorized access to sensitive information, and potential service disruption.

Remediation

Apply the official patch that updates KnowStreaming to version 3.4.2 or later, which enforces proper RBAC on all identity‑management endpoints. Until a patch is available, restrict API access to trusted IP ranges, disable the identity‑management endpoints for non‑admin users, and monitor for anomalous privilege‑elevation activity.

Risk context

The vulnerability is rated critical with a CVSS v3 score of 8.8. Immediate action is recommended to prevent attackers from exploiting the flaw and gaining unrestricted administrative access.

Affected products

  • KnowStreaming 3.4.1

Scores

Severity
critical
CVSS v2
9
CVSS v3
8.8
CVSS v4
8.7
EPSS
—

RBAC API PrivilegeEscalation Authentication KnowStreaming Critical AdminPrivilege

← All CVEs

Related CVEs

critical

CVE-2026-86341

CVE‑2026‑86341 is a critical access‑control flaw that allows an attacker to bypass deployment approval checks by disabling strict policies after a deployment object has been altered. The vulnerability can silently enable unapproved code changes to reach production, compromising the integrity of the deployment pipeline.

View analysis

critical

CVE-2026-76460

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

View analysis

critical

CVE-2026-92748

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicious files to sensitive locations for code execution.

View analysis

critical

CVE-2026-92749

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator session cookies to gain control of protected sites.

View analysis