CVE-2025-49194: Sick Media Server

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The server supports authentication methods in which credentials are sent in plaintext over unencrypted channels. If an attacker were to intercept traffic between a client and this server, the credentials would be exposed.

Affected products

• Sick Media Server: any version

Published 2025-06-12. Last modified 2026-06-17.