High severity8.8NVD Advisory· Published Mar 18, 2026· Updated Jun 17, 2026
CVE-2026-32321
CVE-2026-32321
Description
ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the actions/ajax.php endpoint. Due to insufficient input sanitization of the userid parameter, an authenticated attacker can execute arbitrary SQL queries, leading to full database disclosure and potential administrative account takeover. Version 5.5.3 #80 fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <5.5.3 #80
- Range: < 5.5.3 - #80
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.