Skip to content
Threat Feed
Subscribe

Product

AVideo (<= 9c39d8c8)

1 brief RSS
high advisory

CVE-2026-58003: Cross-Site Request Forgery in WWBN AVideo

WWBN AVideo versions through commit 9c39d8c8 contain a CSRF vulnerability in the releaseVideoNow.json.php endpoint that allows unauthenticated attackers to force administrative users to publish embargoed videos.

AVideo +1 web-application csrf cve-2026-58003 web-application-vulnerability authorization-bypass cve-2026-59256
1r 1t 1c