XWP Stream – Activity Log & Audit Trail

• CVE-2026-11907 Medium 6.5 Stream <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via Heartbeat API 0.4%