Known Vulnerabilities for AVideo by WWBN
Listed below are 10 of the newest known vulnerabilities associated with "AVideo" by "WWBN".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-72748 json | AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-72747 json | AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious Jav... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-64626 json | AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder... | Not Provided | 2026-07-20 | 2026-07-22 |
| CVE-2026-64625 json | AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted... | Not Provided | 2026-07-20 | 2026-07-23 |
| CVE-2026-63305 json | AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint where notifyCode and callb... | Not Provided | 2026-07-16 | 2026-07-20 |
| CVE-2026-63304 json | AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlone/functions.php where the listFFmpe... | Not Provided | 2026-07-16 | 2026-07-20 |
| CVE-2026-60092 json | AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerabi... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59808 json | AVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEncoderQueueId() returns vi... | Not Provided | 2026-08-22 | 2026-08-22 |
| CVE-2026-59256 json | WWBN AVideo through commit 9c39d8c8 contains an authorization bypass vulnerability where getToken() creates tokens without bi... | Not Provided | 2026-08-22 | 2026-08-22 |
| CVE-2026-58003 json | WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the releaseVideoNow.json.php endpo... | Not Provided | 2026-08-22 | 2026-08-22 |