CVE-2026-19912

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 25, 2026

Last Seen

August 26, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in Kaltura HTML5 Player Expose Organizations to Attacks72.8

Two critical vulnerabilities, CVE-2026-19912 and CVE-2026-19913, have been discovered in the Kaltura HTML5 Player Library (mwEmbed/html5lib). These flaws allow unauthenticated remote attackers to execute arbitrary code and read sensitive files on affected servers. The vulnerabilities stem from unsaf...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerabilities in Kaltura HTML5 Player Expose Organizations to Attacks

Aug 26·2 sources

Related Entities

Zero-day Exploit Data Breach CVE-2026-19913 CWE-502 - Deserialization Of Untrusted Data CWE-22 - Path Traversal CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication T1059 - Command and Scripting Interpreter T1005 - Data From Local System T1041 - Exfiltration Over C2 Channel T1190 - Exploit Public-Facing Application T1505.003 - Web Shell

CVE-2026-19912

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical Vulnerabilities in Kaltura HTML5 Player Expose Organizations to Attacks

Related Articles (3)

Rapid7 CVE-2026-19912

Critical Unpatched Vulnerabilities in Kaltura mwEmbed Expose Organizations to Remote ...

VU#308749: Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers

Related Entities