Product by Truelockmc
Streambert
8 known vulnerabilities in Streambert (Truelockmc), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48055 | Streambert: Arbitrary File Write (Zip Slip) via Subtitle Extraction | 10.0 | |
| Critical | CVE-2026-48056 | Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler | 10.0 | |
| Critical | CVE-2026-48046 | Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler | — | |
| High | CVE-2026-52877 | Streambert : Insecure Protocol Execution in open-external IPC Handler | 8.3 | |
| High | CVE-2026-52876 | Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback | 8.8 | |
| High | CVE-2026-52872 | Streambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol | 8.8 | |
| High | CVE-2026-52875 | Streambert: Arbitrary Directory Creation and File Manipulation via Backup Handler | — | |
| Medium | CVE-2026-52873 | Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained XSS in Electron Renderer | 6.9 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,