CVE-2026-55663 | versatica mediasoup up to 0.22.4/3.20.5 SCTP Stack StateCookie.hpp IsMediasoupStateCookie improper authentication

August 25, 2026 Yanac

A vulnerability was found in versatica mediasoup up to 0.22.4/3.20.5 and classified as critical. This affects the function StateCookie::IsMediasoupStateCookie of the file worker/include/RTC/SCTP/association/StateCookie.hpp of the component SCTP Stack. Such manipulation leads to improper authentication.

This vulnerability is referenced as CVE-2026-55663. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More