CVE-2020-8887: Telestream Medius

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php (aka the server login page).

Affected products

• Telestream Medius: before 10.7.5 (fixed in 10.7.5)
• Telestream Sentry: before 10.7.5 (fixed in 10.7.5)

Published 2020-09-22. Last modified 2026-06-17.