WWBN vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 202222
3. 20233
4. 202414
5. 20257
6. 2026293

Newest CVEs

• CVE-2026-124424

  WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php

  WWBN · AVideo

  High7.1
• CVE-2026-123486

  WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.php

  WWBN · AVideo

  Medium6.0
• CVE-2026-61575

  AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles

  WWBN · AVideo-Encoder

  Medium4.7
• CVE-2026-61569

  AVideo-Encoder: pre-authentication streamer-login SQL injection

  WWBN · AVideo-Encoder

  High7.5
• CVE-2026-61571

  AVideo-Encoder: missing authentication on control and status endpoints

  WWBN · AVideo-Encoder

  High7.3
• CVE-2026-61572

  AVideo-Encoder: unauthenticated full-response server-side request forgery

  WWBN · AVideo-Encoder

  High8.6
• CVE-2026-61573

  AVideo-Encoder: reflected cross-site scripting in the login interface

  WWBN · AVideo-Encoder

  Medium6.1
• CVE-2026-61567

  AVideo-Encoder: unauthenticated command execution through streamer login trust

  WWBN · AVideo-Encoder

  Critical10.0
• CVE-2026-61564

  AVideo-Encoder: unauthenticated installer PHP code injection

  WWBN · AVideo-Encoder

  Critical10.0
• CVE-2026-116800

  WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header

  WWBN · AVideo

  Medium6.9