Vulnerabilities

TI-2026-18318 CVE-2026-22800

PILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences

LOW 20

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.00151 Published 2026-01-12 Fixed in 4.10.0 CWE-352

TI-2025-38964 CVE-2025-62781

LOW 22

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00174 Published 2025-10-27 Fixed in 4.8.0 CWE-613

TI-2025-38764 CVE-2025-62524

LOW 24

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00261 Published 2025-10-27 Fixed in 4.8.0 CWE-200

TI-2025-38763 CVE-2025-62523

LOW 27

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00204 Published 2025-10-27 Fixed in 4.8.0 CWE-942

TI-2023-25447 CVE-2023-47107

MEDIUM 41

PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00599 Published 2023-11-08 Fixed in 2.3.0 CWE-20