Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in higuma web-audio-recorder-js 0.1/0.1.1. Impacted is the function extend in the library lib/WebAudioRecorder.js of the component Dynamic Config Handling. Such manipulation leads to improperly controlled modification of object prototype attributes. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-23 | 1 | Disclosure1 |
| 2026-03-20 | 1 | Disclosure1 |
| 2026-03-25 | 1 | Disclosure1 |
| 2026-03-26 | 1 | General1 |
@lostsec_ CVE-2026-2964: https://youtu.be/u-GCw4jhp_Q
Post summary
The tweet merely references CVE‑2026‑2964 and links to a YouTube video, offering no technical details, exploit code, or evidence of exploitation.
"CVE‑2026‑2964: From Prototype Pollution to Remote Code Execution in web‑audio‑recorder‑js" by Dipesh Paul #BugBounty #Cybersecurity #Hacking #InfoSec https://medium.com/@pauldipesh29/cve-2026-2964-from-prototype-pollution-to-remote-code-execution-in-web-audio-recorder-js-395373276d3a
Post summary
The Medium article announces CVE‑2026‑2964, detailing how prototype pollution in web‑audio‑recorder‑js can lead to remote code execution.
🚨 #CVE-2026-2964: How a Blind Merge Unlocks RCE in a #JavaScript Audio Library + Video https://undercodetesting.com/cve-2026-2964-how-a-blind-merge-unlocks-rce-in-a-javascript-audio-library-video/ Educational Purposes!
Post summary
The tweet announces CVE‑2026‑2964, noting that a blind merge in a JavaScript audio library enables RCE, but offers no PoC, exploit code, patch details, or evidence of active exploitation.
⚡ New CVE Alert: CVE-2026-2964 📊 Severity: 5.0 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-2964 #CVE-2026-2964 #CVE #Medium #CyberSecurity #InfoSec https://t.co/1ika4nvJ1U
Post summary
A new CVE-2026-2964 has been reported with a medium severity score of 5.0, affecting multiple unspecified products, but no PoC, exploit, or patch information is provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | higuma | webaudiorecorder.js | 0.1 | - | - |
| App | higuma | webaudiorecorder.js | 0.1.1 | - | - |