Tag

Cve-2026-72748

1 brief RSS

Unauthenticated Arbitrary File Write in AVideo

An unauthenticated arbitrary file write vulnerability (CVE-2026-72748) in the AVideo aVideoEncoderChunk.json.php endpoint allows remote attackers to upload arbitrary content to the server, potentially leading to remote code execution.

AVideo web-vulnerability rce file-write cve-2026-72748 web-application xss injection

2r 3t 1c 2h ago