WID-SEC-W-2026-0549

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

VLC für Android: Mehrere Schwachstellen

view advisory published 2026-02-26

Ein Angreifer kann mehrere Schwachstellen in VLC für Android ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-26227US——
VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time passw…
CVE-2026-26228US——
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file q…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan