CVE-2026-27466

CVE-2026-27466 is a Denial of Service vulnerability affecting BigBlueButton versions 3.0.21 and below. It stems from flawed documentation instructing users to expose ClamAV ports to the internet, allowing remote attackers to exhaust server resources or shut down the clamd process. With a CVSS score of 8.2 (HIGH), this vulnerability is easily exploitable remotely with low attack complexity, potentially leading to high availability impact and some confidentiality loss. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, though it has garnered some community discussion. Users are only affected if they followed the specific, optional instructions in the BigBlueButton documentation.