CVE-2026-32321
ClipBucket v5 is an open source video sharing platform.
Published Mar 18, 2026 · updated Jun 17, 2026 · oxygenz clipbucket
ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the endpoint. Due to insufficient input sanitization of the parameter, an authenticated attacker can execute arbitrary SQL queries, leading to full database disclosure and potential administrative account takeover. Version 5.5.3 #80 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 18, 2026 · NIST NVD
Detected
ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the endpoint. Due to insufficient input sanitization of the parameter, an authenticated attacker can execute arbitrary SQL queries, leading to full database disclosure and potential administrative account takeover. Version 5.5.3 #80 fi
Jun 17, 2026 · NIST NVD
Updated
ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the endpoint. Due to insufficient input sanitization of the parameter, an authenticated attacker can execute arbitrary SQL queries, leading to full database disclosure and potential administrative account takeover. Version 5.5.3 #80 fi
Affected
- cpe oxygenz/clipbucketversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-32321
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-32321
ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the endpoint. Due to insufficient input sanitization of the parameter, an authenticated
nvd.nist.gov