Wwbn vulnerabilities
345 CVEs and advisories name Wwbn as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-86727AVideo through 29.0 Information Disclosure via stats.json.php
- CVE-2026-86726AVideo through 29.0 Information Disclosure via restreamsActive.json.php
- CVE-2026-86725AVideo SocialMediaPublisher Missing Authorization via add.json.php
- CVE-2026-86724AVideo YPTWallet saveBalance.php Cross-Site Request Forgery
- CVE-2026-86723AVideo LoginControl PGP Authentication Bypass via verifyChallenge
- CVE-2026-86722AVideo Authentication Bypass via SQL Cache Invalidation
- CVE-2026-86721AVideo through c3edcc274c Authorization Bypass via Session Cookie
- CVE-2026-86720WWBN AVideo Missing Authorization via resendRestreamer.json.php
- CVE-2026-86719WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking
- CVE-2026-86718WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.php
- CVE-2026-86190WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter
- CVE-2026-86189WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php
- CVE-2026-86188AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting
- CVE-2026-86187WWBN AVideo Weak PRNG Password Generation via External Login
- CVE-2026-86186AVideo API Rate Limit Bypass via Bot User-Agent Header
- CVE-2026-85577AVideo userLogin.php Reflected XSS via error parameter
- CVE-2026-85164WWBN AVideo Server-Side Request Forgery via set_api_userImages
- CVE-2026-85163AVideo Server-Side Request Forgery via epg_link parameter
- CVE-2026-85162AVideo through c91b5975d CSRF via saveLive.php
- CVE-2026-85161AVideo removePoster.php Cross-Site Request Forgery File Deletion
- CVE-2026-85160AVideo through c91b5975d CSRF and Path Traversal via stopLive.php
- CVE-2026-85159AVideo Reflected XSS via cancelUri in userLogin.php
- CVE-2026-85158AVideo Reflected XSS via videoEmbeded.php link parameter
- CVE-2026-85157WWBN AVideo Broken Access Control via feed/index.php program_id
- CVE-2026-85156WWBN AVideo Broken Access Control via Channel Page
- CVE-2026-85155WWBN AVideo SQL Injection via get.json.php APIName channels
- CVE-2026-85154WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash
- CVE-2026-84483WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php
- CVE-2026-84482WWBN AVideo Cross-Site Request Forgery via get_domain() validation
- CVE-2026-84481WWBN AVideo through 30.0 Information Disclosure via MobileManager