SEC.co
Emergency

By weakness (CWE)

CWE-155: related vulnerabilities

CVEs classified under CWE-155. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-49482MEDIUM 4.3

    ClipBucket v5 has a vulnerability in its subtitle editing feature that allows authenticated users to corrupt subtitle data across multiple videos at once. By sending a specially crafted request with a wildcard character, an attacker with valid credentials can overwrite all subtitle titles for any video they control in a single action. This is a data integrity issue rather than a data exposure risk, and affects versions before 5.5.3 - #141.