CVE-2026-62030

HighCVSS 7.2

Published: 10/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 11/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

Unauthenticated Server Side Request Forgery (SSRF) in the StreamCast plugin up to version 2.4.5. An attacker can send requests from the server to internal resources.

Risk Assessment

Risk of accessing internal systems that may be inaccessible from outside, and potential use for further attacks.

Recommendation

Update the StreamCast plugin to the latest version with the security fix.

Other vulnerabilities in StreamCast

CVE-2026-116849Medium
The StreamCast plugin (up to version 2.4.6) contains a Stored Cross-site Scripting (XSS) vulnerability resulting from improper neutralization of input during web page generation. Malicious JavaScript code can be stored and executed in the victim's browser.

Original NVD description (English source)

Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS