Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
WWBN

WWBN AVideo-Encoder vulnerabilities

10 published CVEs name WWBN AVideo-Encoder among the affected products.

Newest CVEs

  • CVE-2026-61575

    AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles

    WWBN · AVideo-Encoder

    Medium4.7
  • CVE-2026-61569

    AVideo-Encoder: pre-authentication streamer-login SQL injection

    WWBN · AVideo-Encoder

    High7.5
  • CVE-2026-61571

    AVideo-Encoder: missing authentication on control and status endpoints

    WWBN · AVideo-Encoder

    High7.3
  • CVE-2026-61572

    AVideo-Encoder: unauthenticated full-response server-side request forgery

    WWBN · AVideo-Encoder

    High8.6
  • CVE-2026-61573

    AVideo-Encoder: reflected cross-site scripting in the login interface

    WWBN · AVideo-Encoder

    Medium6.1
  • CVE-2026-61567

    AVideo-Encoder: unauthenticated command execution through streamer login trust

    WWBN · AVideo-Encoder

    Critical10.0
  • CVE-2026-61564

    AVideo-Encoder: unauthenticated installer PHP code injection

    WWBN · AVideo-Encoder

    Critical10.0
  • CVE-2026-33025

    AVideo-Encoder is Vulnerable to Authenticated SQL Injection via ORDER BY Clause

    WWBN · AVideo-Encoder

    High8.6
  • CVE-2026-33024

    AVideo-Encoder has Unauthenticated Blind Server-Side Request Forgery via Public Thumbnail Generator

    WWBN · AVideo-Encoder

    Critical9.3
  • CVE-2026-29058

    AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

    WWBN · AVideo-Encoder

    Critical9.8