Skip to content
Threat Feed
Subscribe

Product

AVideo (<= 9c39d8c8)

2 briefs RSS
critical advisory

WWBN AVideo SSRF Filter Bypass via NAT64 Hex Encoding

WWBN AVideo is vulnerable to a Server-Side Request Forgery (SSRF) bypass in the isSSRFSafeURL function due to improper normalization of hex-encoded NAT64 addresses.

AVideo +7 credential-access web-application authentication-bypass web-application-vulnerability path-traversal reconnaissance web-vulnerability csrf +13
7r 15t 1c updated
high advisory

CVE-2026-58003: Cross-Site Request Forgery in WWBN AVideo

WWBN AVideo versions through commit 9c39d8c8 contain a CSRF vulnerability in the releaseVideoNow.json.php endpoint that allows unauthenticated attackers to force administrative users to publish embargoed videos.

AVideo +1 web-application csrf cve-2026-58003 web-application-vulnerability authorization-bypass cve-2026-59256
1r 1t 1c