CVE-2026-105486 | OSSRS srs up to 7.0-a1 System API internal/proxy/api.go systemAPI.Run missing authentication (GHSA-rhq3-46g9-q5wp/4690)

October 5, 2026 Yanac

A vulnerability has been found in OSSRS srs up to 7.0-a1 and classified as critical. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication.

This vulnerability is cataloged as CVE-2026-105486. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More