CVE-2018-19365: Wowza Streaming Engine

Critical severity, CVSS 9.1. EPSS: 22.3% chance of exploitation in the next 30 days.

The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request.

Affected products

• Wowza Streaming Engine: version 4.7.4.0.1 only

Published 2019-03-21. Last modified 2026-06-17.