Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the `actions/ajax.php` endpoint. Due to insufficient input sanitization of the `userid` parameter, an authenticated attacker can execute arbitrary SQL queries, leading to full database disclosure and potential administrative account takeover. Version 5.5.3 #80 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-18 | 2 | Disclosure1Patch1 |
| 2026-03-19 | 1 | Disclosure1 |
CVE-2026-32321 ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within t… https://www.cve.org/CVERecord?id=CVE-2026-32321
Post summary
The text discloses an authenticated time‑based blind SQL injection flaw in ClipBucket (v5 until 5.5.3), providing technical details but no proof of concept, exploit code, or patch information.
[CVE-2026-32321: HIGH] 🔒 Secure your data! Cyber specialists discovered a critical SQL injection vulnerability in ClipBucket v5. Update to version 5.5.3 #80 to fix the issue and protect your platform.#cve,CVE-2026-32321,#cybersecurity https://cvefind.com/CVE-2026-32321
Post summary
The post alerts users to a critical SQL injection flaw in ClipBucket v5 and recommends updating to version 5.5.3 #80 to remediate the vulnerability.
🟠 CVE-2026-32321 - High ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the `actions/ajax.php` end... https://www.thehackerwire.com/vulnerability/CVE-2026-32321/ https://t.co/c3u2ITwPBX
Post summary
The tweet announces that CVE‑2026‑32321 is a high‑severity authenticated, time‑based blind SQL injection affecting ClipBucket v5 (prior to 5.5.3) and links to a vulnerability article.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oxygenz | clipbucket | - | - | - |