Findings

CVE-2026-32321

ClipBucket v5 is an open source video sharing platform.

Published Mar 18, 2026 · updated Jun 17, 2026 · oxygenz clipbucket

ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the endpoint. Due to insufficient input sanitization of the parameter, an authenticated attacker can execute arbitrary SQL queries, leading to full database disclosure and potential administrative account takeover. Version 5.5.3 #80 fixes the issue.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 18, 2026 · NIST NVD

    Detected

    ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the endpoint. Due to insufficient input sanitization of the parameter, an authenticated attacker can execute arbitrary SQL queries, leading to full database disclosure and potential administrative account takeover. Version 5.5.3 #80 fi

  2. Jun 17, 2026 · NIST NVD

    Updated

    ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the endpoint. Due to insufficient input sanitization of the parameter, an authenticated attacker can execute arbitrary SQL queries, leading to full database disclosure and potential administrative account takeover. Version 5.5.3 #80 fi

Affected

  • cpe oxygenz/clipbucketversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32321

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32321

    ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the endpoint. Due to insufficient input sanitization of the parameter, an authenticated

    nvd.nist.gov

References

CVE-2026-32321 · ZeroDay Findings