Which versions of Live555 are affected by CVE-2026-41470?

LIVE555 RTSP streaming server software contains an authentication bypass vulnerability that allows remote attackers to disrupt media delivery, terminate viewer sessions, and crash services without…. A patch is available.

Is there a public PoC exploit available for CVE-2026-41470?

Yes, a public proof-of-concept exploit is available for CVE-2026-41470. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-41470?

Within 24 hours: Inventory all LIVE555 installations and identify versions prior to 2026.04.22; assess the business criticality of affected streaming services. Within 7 days: Upgrade to LIVE555 version 2026.04.22 or later on all systems and validate streaming functionality post-deployment. Within 30 days: Restrict RTSP network access to trusted IP ranges via firewall rules and implement monitoring to detect suspicious session token reuse.

Live555 CVE-2026-41470

Q: What is the CVSS score of CVE-2026-41470?

CVE-2026-41470 has a CVSS 4.0 base score of 8.2 (High). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-30973 HIGH

Incorrect Authorization (CWE-863)

2026-05-19 VulnCheck

GHSA-3x7c-xg4r-972q

Authentication Bypass Live555

8.2

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.2 HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

SUSE

5.9 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

May 19, 2026 - 19:30 vuln.today

Severity Changed

May 19, 2026 - 19:22 NVD

MEDIUM HIGH

CVSS changed

May 19, 2026 - 19:22 NVD

5.9 (MEDIUM) 8.2 (HIGH)

DescriptionCVE.org

LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions.

AnalysisAI

Authorization bypass in LIVE555 RTSP server (versions before 2026.04.22) allows remote unauthenticated attackers to hijack active streaming sessions by replaying valid Session tokens over a separate TCP connection. By issuing PLAY or TEARDOWN commands with a captured token, attackers can crash the server via virtual function call errors or terminate legitimate viewers' streams. Publicly available exploit code exists, and a vendor patch has been released; no public exploit identified as actively exploited in CISA KEV at time of analysis.