Meetecho Janus-Gateway vulnerabilities

3 CVEs affecting Meetecho Janus-Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-110717, published 2026-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-110717, published 2026-10-14. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordings_path via the record request…
CVE-2026-108831, published 2026-10-12. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation…
CVE-2026-108830, published 2026-10-12. Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days. A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the component VideoRoom. This manipulation causes race…