CVE-2026-105086 CRITICAL 9.3 Avideo — WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated…● PoC 2026-10-04 CVE-2026-105089 CRITICAL 9.3 Avideo — WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload …● PoC 2026-10-04 CVE-2026-100630 MEDIUM 5.1 Avideo — AVideo before 29.1.0 contains a stored cross-site scripting vulnerability in the video trailer1 field rendered…● PoC 2026-09-26 CVE-2026-92912 HIGH 8.3 Avideo — AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 uses cryptographically weak uniqid() values for RTMP p…● PoC 2026-09-17 CVE-2026-92913 CRITICAL 9.1 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 uses a cryptographically weak pseudo-random num…● PoC 2026-09-17 CVE-2026-92914 HIGH 8.6 Avideo — AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that… 2026-09-17 CVE-2026-92915 MEDIUM 6.9 Avideo — WWBN AVideo through commit e01e41ecc (no patched version available) contains a broken access control flaw in o…● PoC 2026-09-17 CVE-2026-92577 HIGH 8.7 Avideo — In AVideo through 29.0, the API get_api_video endpoint contains a broken access control vulnerability in the c… 2026-09-16 CVE-2026-92578 CRITICAL 9.2 Avideo — WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is acc…● PoC 2026-09-16 CVE-2026-92579 MEDIUM 5.3 Avideo — In AVideo through 29.0, the autoCSRFGuard() function maintains a hardcoded allowlist of exempt basenames teste…● PoC 2026-09-16 CVE-2026-92580 HIGH 8.7 Avideo — In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In plugin/CloneSite…● PoC 2026-09-16 CVE-2026-92581 MEDIUM 5.3 Avideo — In AVideo through 29.0, Like::__construct() performs counter arithmetic on raw request values before validatio…● PoC 2026-09-16 CVE-2026-92582 HIGH 7.1 Avideo — AVideo (WWBN/AVideo) through 29.0 (commit e01e41ecc) is vulnerable to cross-site request forgery. objects/vide… 2026-09-16 CVE-2026-92583 MEDIUM 6.9 Avideo — AVideo through 29.0 contains a race condition in the enforceRateLimit() function that fails to atomically incr…● PoC 2026-09-16 CVE-2026-92584 MEDIUM 5.3 Avideo — AVideo through 29.0 (current revision e01e41ecc) contains a stored cross-site scripting vulnerability. The una…● PoC 2026-09-16 CVE-2026-92585 MEDIUM 5.3 Avideo — AVideo through 29.0 (commit c3edcc274c389816d434acadac07ee78eaf330c1) fails to validate video access permissio…● PoC 2026-09-16 CVE-2026-92586 MEDIUM 5.3 Avideo — AVideo through 29.0 (commit c3edcc274c389816d434acadac07ee78eaf330c1) fails to verify video access permissions…● PoC 2026-09-16 CVE-2026-91965 HIGH 8.7 Avideo — WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin…● PoC 2026-09-15 CVE-2026-91966 MEDIUM 6.9 Avideo — AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the check_site_av… 2026-09-15 CVE-2026-91967 MEDIUM 5.3 Avideo — AVideo through 29.0 contains a blind server-side request forgery vulnerability in the getHeaderContentTypeFrom…● PoC 2026-09-15 CVE-2026-90536 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to authorize access to the adsInfo A… 2026-09-12 CVE-2026-90537 HIGH 8.8 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerabi…● PoC 2026-09-12 CVE-2026-90538 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerabi…● PoC 2026-09-12 CVE-2026-90539 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authentication vulnerab… 2026-09-12 CVE-2026-90540 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate watch permissions in the…● PoC 2026-09-12 CVE-2026-90541 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to require authentication in the plu… 2026-09-12 CVE-2026-90542 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate that logged-in users can…● PoC 2026-09-12 CVE-2026-90543 MEDIUM 6.9 Avideo — WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier, with the Live plugin enabled, cont…● PoC 2026-09-12 CVE-2026-90544 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions… 2026-09-12 CVE-2026-90545 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions…● PoC 2026-09-12 CVE-2026-90546 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions… 2026-09-12 CVE-2026-90547 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the …● PoC 2026-09-12 CVE-2026-90548 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the … 2026-09-12 CVE-2026-90549 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to properly authorize access to the … 2026-09-12 CVE-2026-90550 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to check user authorization in the P…● PoC 2026-09-12 CVE-2026-90551 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in th… 2026-09-12 CVE-2026-90552 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in th…● PoC 2026-09-12 CVE-2026-89148 MEDIUM 5.1 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSo…● PoC 2026-09-11 CVE-2026-89239 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting … 2026-09-11 CVE-2026-89240 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting …● PoC 2026-09-11 CVE-2026-89241 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting …● PoC 2026-09-11 CVE-2026-89242 MEDIUM 6.9 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a server-side request forgery vul…● PoC 2026-09-11 CVE-2026-89243 CRITICAL 9.2 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vul…● PoC 2026-09-11 CVE-2026-89244 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting … 2026-09-11 CVE-2026-89245 HIGH 7.1 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vuln…● PoC 2026-09-11 CVE-2026-89246 MEDIUM 5.1 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a CSV formula injection vulnerabi…● PoC 2026-09-11 CVE-2026-89247 MEDIUM 5.3 Avideo — WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerabi…● PoC 2026-09-11 CVE-2026-89248 MEDIUM 6.9 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization chec…● PoC 2026-09-11 CVE-2026-89249 CRITICAL 9.3 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerab… 2026-09-11 CVE-2026-89250 HIGH 8.7 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vuln…● PoC 2026-09-11 CVE-2026-89251 HIGH 7.1 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/AD_S…● PoC 2026-09-11 CVE-2026-89252 HIGH 7.1 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php wh…● PoC 2026-09-11 CVE-2026-89253 CRITICAL 9.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vul…● PoC 2026-09-11 CVE-2026-89254 CRITICAL 9.3 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerab… 2026-09-11 CVE-2026-89255 CRITICAL 9.3 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerab…● PoC 2026-09-11 CVE-2026-89256 CRITICAL 9.3 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerab…● PoC 2026-09-11 CVE-2026-89257 MEDIUM 5.3 Avideo — AVideo through 29.0 contains an insecure direct object reference (IDOR) vulnerability in objects/categoryDelet…● PoC 2026-09-11 CVE-2026-88865 HIGH 8.6 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate restream ownership in getRest… 2026-09-10 CVE-2026-88866 CRITICAL 9.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vul…● PoC 2026-09-10 CVE-2026-88867 CRITICAL 9.3 Avideo — WWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07ee78eaf330c1, contains a store…● PoC 2026-09-10 CVE-2026-88868 CRITICAL 9.3 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerab… 2026-09-10 CVE-2026-88869 CRITICAL 9.3 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerab…● PoC 2026-09-10 CVE-2026-88870 HIGH 7.1 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vuln… 2026-09-10 CVE-2026-88871 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) contains a cross-site…● PoC 2026-09-10 CVE-2026-88872 HIGH 7.1 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerabi…● PoC 2026-09-10 CVE-2026-88873 HIGH 7.1 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vuln… 2026-09-10 CVE-2026-88874 HIGH 8.7 Avideo — AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) does not enforce the Liv…● PoC 2026-09-10 CVE-2026-88875 MEDIUM 5.3 Avideo — AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) incompletely sanitizes s… 2026-09-10 CVE-2026-88876 HIGH 8.7 Avideo — AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerabilit… 2026-09-10 CVE-2026-86718 HIGH 7.1 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vuln…● PoC 2026-09-08 CVE-2026-86719 MEDIUM 5.3 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master) contains a cross-site request for… 2026-09-08 CVE-2026-86720 HIGH 8.6 Avideo — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of live_restre…● PoC 2026-09-08 CVE-2026-86721 HIGH 8.7 Avideo — AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named '… 2026-09-08 CVE-2026-86722 HIGH 8.6 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability…● PoC 2026-09-08 CVE-2026-86723 HIGH 8.6 Avideo — AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in Log… 2026-09-08 CVE-2026-86724 HIGH 7.1 Avideo — AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerabi… 2026-09-08 CVE-2026-86725 HIGH 7.1 Avideo — AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in the …● PoC 2026-09-08 CVE-2026-86726 HIGH 7.1 Avideo — AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows a… 2026-09-08 CVE-2026-86727 HIGH 8.7 Avideo — AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows…● PoC 2026-09-08 CVE-2026-86728 HIGH 8.7 Avideo — AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that expo…● PoC 2026-09-08 CVE-2026-86729 CRITICAL 9.1 Avideo — WWBN AVideo through commit e01e41ecc (no patched version available) exposes get_api_preauthorize in plugin/API… 2026-09-08 CVE-2026-86186 MEDIUM 6.3 Avideo — AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypas…● PoC 2026-09-05 CVE-2026-86187 HIGH 7.4 Avideo — WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator,… 2026-09-05 CVE-2026-86188 MEDIUM 6.9 Avideo — AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing unauthenticated at…● PoC 2026-09-05 CVE-2026-86189 CRITICAL 9.3 Avideo — WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated atta… 2026-09-05 CVE-2026-86190 CRITICAL 9.3 Avideo — WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete u…● PoC 2026-09-05