CVE-2026-57716 videowhisper CVE debrief

Who should care

Defenders and administrators using the Broadcast Live Video plugin, especially those with versions <= 7.2.4, should assess exposure and potential impact.

Why it matters

CVE-2026-57716 is a MEDIUM-severity vulnerability in Broadcast Live Video plugin versions <= 7.2.4, allowing unauthenticated arbitrary file deletion. Defenders should prioritize verifying exposure, assessing potential impact, and considering upgrades to non-affected versions.

• Potential data loss or integrity issues due to arbitrary file deletion
• Possible disruption of service or availability
• Need for verification of plugin versions and exposure
• Potential for attackers to exploit the vulnerability

Technical summary

The vulnerability allows unauthenticated arbitrary file deletion in Broadcast Live Video plugin versions <= 7.2.4. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, especially in environments using the affected plugin version.

Recommended defensive actions

• Verify exposure by checking plugin versions in use
• Assess potential impact on systems using the affected plugin
• Consider upgrading to a non-affected version if available

Evidence notes

The vulnerability is described in the CVE record and NVD entry. Patchstack provides additional information on the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.