Skip to content
Threat Feed
Subscribe

Product

AVideo (<= E01e41ecc)

2 briefs RSS
critical advisory

WWBN AVideo SSRF Filter Bypass via NAT64 Hex Encoding

WWBN AVideo is vulnerable to a Server-Side Request Forgery (SSRF) bypass in the isSSRFSafeURL function due to improper normalization of hex-encoded NAT64 addresses.

AVideo +7 credential-access web-application authentication-bypass web-application-vulnerability path-traversal reconnaissance web-vulnerability csrf +13
7r 15t 1c updated
high advisory

Authentication Bypass in AVideo via Parameter Manipulation

An authentication bypass vulnerability in AVideo (CVE-2026-59808) allows attackers with upload access to hijack administrative sessions via improper video ownership verification.

AVideo +6 authentication-bypass privilege-escalation web-application ssrf vulnerability credential-theft web-vulnerability path-traversal +4
7r 13t 1c updated