OvenMediaEngine vulnerabilities

CVEs whose affected-version data names the OvenMediaEngine package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118689High· 7.5PoC

1w ago

OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length

OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allows unauthenticated attackers to stall connections by sending payload_length values above 32750. Attackers can send crafted OVT …

▾ MidnightOvenMediaLabs · OvenMediaEngineEPSS 0.51%via CVEORG