Wwbn vulnerabilities
345 CVEs and advisories name Wwbn as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-84480WWBN AVideo Password Recovery Token Expiration Bypass
- CVE-2026-84479WWBN AVideo Authentication Bypass via User-Agent Header
- CVE-2026-84478WWBN AVideo Unauthenticated Arbitrary Log File Deletion
- CVE-2026-84477AVideo Stored XSS via Live Schedule Title Description
- CVE-2026-84476WWBN AVideo Authentication Bypass via X-Real-IP Header
- CVE-2026-84208AVideo User_Location Plugin Unauthenticated SQL Injection
- CVE-2026-84187AVideo on_publish.php Missing Authentication Check via RTMP Callback
- CVE-2026-83595AVideo Cross-Site Request Forgery via plugin/API/set.json.php
- CVE-2026-82648WWBN AVideo SSRF Filter Bypass via NAT64 Hex Address
- CVE-2026-82647WWBN AVideo Cross-Site Request Forgery via sendEmail.json.php
- CVE-2026-82646WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.php
- CVE-2026-82645AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token
- CVE-2026-82644WWBN AVideo Brute-force Rate Limiting Bypass via Missing User-Agent
- CVE-2026-82643WWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.php
- CVE-2026-81733WWBN AVideo through 30.0 CSRF via myLiveControls.save.json.php
- CVE-2026-81732WWBN AVideo through 30.0 Information Disclosure via report4.json.php
- CVE-2026-81678AVideo SSRF Guard Bypass via IPv6 Transition Addresses
- CVE-2026-59808AVideo Authentication Bypass via Unkeyed Video Hash Disclosure
- CVE-2026-59256WWBN AVideo Unbound Token Authorization Bypass via Gallery
- CVE-2026-58003WWBN AVideo Cross-Site Request Forgery via releaseVideoNow.json.php
- CVE-2026-58002WWBN AVideo Authorization Bypass via Users_affiliations add.json.php
- CVE-2026-58001WWBN AVideo Cross-Site Request Forgery via videoEditLight.php
- CVE-2026-57944AVideo channelToGallery.json.php Cross-Site Request Forgery
- CVE-2026-56380AVideo feed/index.php Exposure of Channel Owner Email Address
- CVE-2026-72748AVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.php
- CVE-2026-72747AVideo Stored Cross-Site Scripting via Unauthenticated Registration
- CVE-2026-64626AVideo Encoder downloadURL SSRF via unpinned retry fallback
- CVE-2026-64625AVideo before 29.0 OS Command Injection via execAsync
- CVE-2026-33731AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data
- CVE-2026-55173AVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink