CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[NEW] [high] BigBlueButton: Vulnerability enables disclosure of information

high
A remote, anonymous attacker can exploit a vulnerability in BigBlueButton to disclose information.

CSIRTS triage

vendor: BigBlueButtonproduct: BigBlueButtonInformation disclosure
What
A vulnerability in BigBlueButton allows remote anonymous attackers to disclose sensitive information.
Who is affected
All BigBlueButton instances accessible to remote attackers are affected.
Urgency
High severity information disclosure with no exploitation barrier; remediation is urgent.
Action
Obtain and apply the latest BigBlueButton security update from the vendor.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch BigBlueButton

Get an email when a new BigBlueButton advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
high
Published
2026-08-14
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2845

Recent advisories for BigBlueButton

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from CERT-Bund (BSI) Security Advisories