{"affected":[{"defaultStatus":"unaffected","product":"Streaming Engine","source":"CNA: mitre","vendor":"Wowza","versions":[{"lessThan":"4.12.2","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-123029","cwes":["CWE-611"],"description":"Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza Streaming Engine process.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: mitre","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793861137554,"publishedAt":1793861137554,"references":[{"source":"CNA: mitre","tags":["vendor-advisory"],"url":"https://www.wowza.com/docs/xxe-allows-reading-local-files"}],"remediation":[],"revision":"cc09daa21e36f6716382dae213d9f48f7ca4eed3e1fada256a4fd53e1dc83b5f","sources":[{"modifiedAt":1793861137554,"name":"CNA: mitre","retrievedAt":1793862520513,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123029"}],"ssvc":null,"status":"published","title":"CVE-2026-123029","updatedAt":1793862520513}