Unpatched Kaltura mw Embed Flaws Could Let Remote Attackers Read Files and Run Code
CERT/CC disclosed two unpatched vulnerabilities, CVE-2026-19913 and CVE-2026-19912, in Kaltura's mwEmbed HTML5 player library, both stemming from unsafe deserialization in the mwEmbedLoader.php endpoint that lets a remote, unauthenticated attacker read...