🚨 EUVD-2026-8858

[euvd_bot@mastodon.social]

EUVD-2026-8858

Score: 2.3/10 (CVSS v3.1)
Product: VLC for Android
Vendor: VideoLAN
Updated: 2026-02-26

VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configu...

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-8858

#cybersecurity #infosec #euvd #cve #vulnerability