I Could've Rickrolled the FIFA World Cup. All I Needed Was My ID

A security researcher discovered critical vulnerabilities in FIFA's World Cup 2026 streaming infrastructure after registering as a football agent on FIFA's public portal. By exploiting client-side access controls on FIFA's Football Data Platform, they gained access to the live production Streaming Management panel, exposing all match camera feeds, streaming URLs, and encryption keys—and could have disrupted broadcasts by stopping live streams with a single click. The researcher reported the vulnerabilities to FIFA and relevant authorities, which were subsequently fixed.