CVE-2020-10574: Meetecho Janus

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation.

Affected products

• Meetecho Janus: up to and including 0.9.1

Published 2020-03-14. Last modified 2026-06-17.