Vulnerabilities in WWBN
339 resultsCVE-2026-86720HIGHWWBN AVideo Missing Authorization via resendRestreamer.json.phpEPSS 0.4%CVE-2026-88865HIGHAVideo Missing Authorization via getRestream.json.phpEPSS 0.4%CVE-2026-89247MEDIUMWWBN AVideo XML Injection via plugin/AD_Server/VMAP.phpEPSS 0.4%CVE-2026-86187HIGHWWBN AVideo Weak PRNG Password Generation via External LoginEPSS 0.4%CVE-2026-86726HIGHAVideo through 29.0 Information Disclosure via restreamsActive.json.phpEPSS 0.4%CVE-2026-90537HIGHWWBN AVideo Scheduler sendEmail Missing Authorization via TokenEPSS 0.4%CVE-2026-33237MEDIUMAVideo has SSRF in Scheduler Plugin via callbackURL Missing `isSSRFSafeURL()` ValidationEPSS 0.4%CVE-2026-33043HIGHAVideo affected by Session Hijacking via Unauthenticated Session ID Disclosure with Permissive CORSEPSS 0.4%CVE-2026-90538MEDIUMWWBN AVideo Missing Authorization via playlistsFromUser.json.phpEPSS 0.4%CVE-2026-34374CRITICALAVideo has SQL Injection in Live_schedule::keyExists() via Unparameterized Stream KeyEPSS 0.4%CVE-2026-90552MEDIUMWWBN AVideo Missing Authorization via Playlists_schedules list.json.phpEPSS 0.4%CVE-2026-33297MEDIUMAVideo has an IDOR - Any Admin Can Set Another User's Channel Password via setPassword.json.phpEPSS 0.4%CVE-2026-72747MEDIUMAVideo Stored Cross-Site Scripting via Unauthenticated RegistrationEPSS 0.4%CVE-2026-85163HIGHAVideo Server-Side Request Forgery via epg_link parameterEPSS 0.4%CVE-2026-33651HIGHAVideo has a Blind SQL Injection in Live Schedule Reminder via Unsanitized live_schedule_id in Scheduler_commands::getAllActiveOrToRepeat()EPSS 0.4%CVE-2026-86725HIGHAVideo SocialMediaPublisher Missing Authorization via add.json.phpEPSS 0.4%CVE-2026-43884HIGHWWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()EPSS 0.3%CVE-2026-33041MEDIUMAVideo has an Unauthenticated Password Hash Oracle via encryptPass.json.phpEPSS 0.3%CVE-2026-33692HIGHAVideo Has Unauthenticated .env File Exposure via Official Docker Compose ConfigurationEPSS 0.3%CVE-2026-34733MEDIUMAVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI GuardEPSS 0.3%