Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2), there is a potential XSS attack though closed captions cue text. This vulnerability is fixed in 2.12.11.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-18 | 1 | Disclosure1 |
| 2026-09-22 | 1 | Patch1 |
🚨 New CVEs alert: CVE-2026-94627 (GPU memory exhaustion) and CVE-2026-77615 (XSS in Paella Player) reported. Patch now and monitor for ParsaStealer activity via Telegram #CyberSecurity #CVE #ThreatIntel https://pranithjain.qzz.io/threatintel/telegram?tab=firehose
Post summary
The tweet alerts about two newly disclosed CVEs (GPU memory exhaustion and XSS) and urges immediate patching while advising monitoring for related ParsaStealer activity.
🔴 Opencast Paella Player, Stored Cross-Site Scripting (XSS), #CVE-2026-77615 (High) -DC-Sep2026-2474 https://dailycve.com/opencast-paella-player-stored-cross-site-scripting-xss-cve-2026-77615-high-dc-sep2026-2474/
Post summary
The post serves as a disclosure announcement for a new High-severity Stored XSS vulnerability (CVE-2026-77615) in Opencast Paella Player, providing basic technical details and a link to a summary page without mentioning exploitation, PoCs, or patches.