Bigbluebutton
C
CAUTION
9
Total CVEs
2
Crit / High
4
Medium
0%
Unpatched
83%
Patched
5.5
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 5 patched ✗ 0 unpatched ~ 1 under review
Intelligence by Audience
PoC Available
1 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"bigbluebutton" port:443
org:"Bigbluebutton" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
9
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
5.5
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-16
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-16
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
No recent security news found for Bigbluebutton.
Recent CVEs
showing 20 of 6
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-61602 | 7.5 HIGH | PATCHED / FIX AVAILABLE | 0.39% | 2025-10-09 |
| CVE-2025-61601 | 7.5 HIGH | PATCHED / FIX AVAILABLE | 0.47% | 2025-10-09 |
| CVE-2025-55200 | 7.1 HIGH | PATCHED / FIX AVAILABLE | 0.24% | 2025-10-09 |
| CVE-2023-7296 PoC | 6.4 MEDIUM | PATCH UNDER REVIEW | 0.31% | 2024-10-16 |
| CVE-2024-39302 | 3.7 LOW | PATCHED / FIX AVAILABLE | 0.45% | 2024-06-28 |
| CVE-2024-38518 | 4.6 MEDIUM | PATCHED / FIX AVAILABLE | 0.31% | 2024-06-28 |
Intel
Founded2007
CountryCanada
LicenseOpen Source
Trust ScoreC — CAUTION
Max CVSS7.5
Last Updated2026-07-16
Top Weaknesses
CWE-862
Unknown Weakness Type
1 occurrence in Bigbluebutton CVEs
(11% of total)
CWE-732
Unknown Weakness Type
1 occurrence in Bigbluebutton CVEs
(11% of total)
CWE-276
Incorrect Default Permissions
1 occurrence in Bigbluebutton CVEs
(11% of total)
CWE-400
Uncontrolled Resource Consumption
1 occurrence in Bigbluebutton CVEs
(11% of total)
CWE-200
Sensitive Information Exposure
1 occurrence in Bigbluebutton CVEs
(11% of total)
CWE-601
Open Redirect
1 occurrence in Bigbluebutton CVEs
(11% of total)
CWE-287
Improper Authentication
1 occurrence in Bigbluebutton CVEs
(11% of total)
CWE-639
Unknown Weakness Type
1 occurrence in Bigbluebutton CVEs
(11% of total)
Company Profile
BigBlueButton is an open-source web conferencing system designed primarily for online learning and remote education. It provides real-time sharing of audio, video, slides, chat, and screen, with features like breakout rooms and polling. Its cybersecurity relevance stems from its widespread use in educational institutions, making it a target for vulnerabilities that could compromise virtual classroom security.
Response Metrics
Est. MTTR ⓘ
~60 days
(Average)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +300% worse
CVE count 2026 vs 2025:
1 → 4 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€533K
Est. GDPR High
€5.3M
Based on 0 critical CVEs, 0 CISA KEV, 89% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Bigbluebutton C valtersit.com