Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: VideoLAN VLC for Android 3.7.0 Clear all filters
TI-2026-21218 CVE-2026-26227 · GHSA-r78h-rv66-c9hf

VLC for Android < 3.7.0 Remote Access OTP Authentication Bypass

Priority LOW 28

VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time password (OTP) verification.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0033 Published 2026-02-26 Fixed in 3.7.0 CWE-307
TI-2026-21219 CVE-2026-26228 · GHSA-jjjp-v7q5-4xgm

VLC for Android < 3.7.0 Remote Access Path Traversal

Priority LOW 12

VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-02-26 Fixed in 3.7.0 CWE-22