Skip to main content

Pixera Two Media Server CVE-2026-7703

| EUVD-2026-26841 MEDIUM
Code Injection (CWE-94)
2026-05-03 VulDB
RCE Code Injection
5.5
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

8
Severity Changed
May 03, 2026 - 17:22 NVD
HIGH MEDIUM
CVSS changed
May 03, 2026 - 17:22 NVD
7.3 (HIGH) 5.5 (MEDIUM)
PoC Detected
May 03, 2026 - 17:16 vuln.today
Public exploit code
Analysis Generated
May 03, 2026 - 17:00 vuln.today
EUVD ID Assigned
May 03, 2026 - 16:30 euvd
EUVD-2026-26841
Analysis Generated
May 03, 2026 - 16:30 vuln.today
Patch released
May 03, 2026 - 16:30 nvd
Patch available
CVE Published
May 03, 2026 - 16:15 nvd
MEDIUM 5.5

DescriptionNVD

A flaw has been found in AV Stumpfl Pixera Two Media Server up to 25.2 R2. Impacted is an unknown function of the component Websocket API. This manipulation causes code injection. The attack can be initiated remotely. The exploit has been published and may be used. Upgrading to version 25.2 R3 is recommended to address this issue. Upgrading the affected component is advised.

AnalysisAI

Code injection via Websocket API in AV Stumpfl Pixera Two Media Server ≤25.2 R2 allows unauthenticated remote attackers to execute arbitrary code with low complexity. Publicly available exploit code (GitHub Gist) enables network-based compromise with partial impact to confidentiality, integrity, and availability (CVSS:3.1/C:L/I:L/A:L). …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all instances of Pixera Two Media Server in production and verify current version. Within 7 days: Apply vendor-released patch version 25.2 R3 to all affected systems; if immediate patching is not feasible, implement network segmentation to restrict WebSocket API access to trusted management networks only. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-7703 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy