Known vulnerabilities in BigBlueButton 4.0.0-rc.1

Software: BigBlueButton
Version: 4.0.0-rc.1
Software CPE: cpe:2.3:a:blindsidenetworks:bigbluebutton:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BigBlueButton version 4.0.0-rc.1 BigBlueButton 4.0.0-rc.1 is affected by 4 vulnerabilities: 4 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150173 - Incorrect Authorization
CWE-863 Medium
No
No
3.0.37, 4.0.0 rc.2 16.09.2026 SB2026091624
#VU150172 - Incorrect Authorization
CWE-863 Medium
No
No
3.0.37, 4.0.0 rc.2 16.09.2026 SB2026091624
#VU150171 - Improper Handling of Extra Parameters
CWE-235 Medium
No
No
3.0.37, 4.0.0 rc.2 16.09.2026 SB2026091624
#VU150170 - Improper Access Control
CWE-284 Medium
No
No
3.0.37, 4.0.0 rc.2 16.09.2026 SB2026091624