Security advisory: Pre-authentication RCE in vMix 29 v29.0.0.48 (Studio Coast Pty Ltd)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-08-06 19:23 UTC
Importiert: 2026-08-06 20:11 UTC
Quelle-ID: full_disc
uid_hash: 2061bcd1bc5ba293a67b08cc310c8a6c0b9880817e362bcd3a3738f785fa1ea1

Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Aug 06 0day Rubbish Research Team is publicly disclosing a vulnerability in vMix 29 v29.0.0.48 (Studio Coast Pty Ltd). The

research is published and a proof-of-concept is available.

Pre-authentication RCE (CVSS 9.8, pre-authentication)

vMix 29 ships a Windows-native .NET Framework application with a built-in Web Controller HTTP server on port 8088. The

HTTP API endpoint GET /api/?Function=ScriptStartDynamic&Value=<VB.NET source> takes the...

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss

Zurueck zur Eintrags-Liste