Vulnerabilidades en WWBN

323 resultados
Análisis Vexday

O portfólio de vulnerabilidades do WWBN reúne 187 CVEs catalogadas, com 30 classificadas como críticas e 67 surgidas apenas nos últimos 90 dias — volume recente que indica aceleração no ritmo de descoberta e demanda atenção contínua ao ciclo de atualização. Embora nenhuma CVE esteja no catálogo KEV da CISA, situando a taxa de exploração ativa abaixo da média geral do catálogo, o CVE-2022-30690 apresenta EPSS de 0,8358, sinalizando alta probabilidade estimada de exploração e devendo ser tratado com prioridade. A falha mais recorrente é CWE-79 (Cross-Site Scripting), categoria que, combinada com a existência de ao menos uma prova de conceito pública, amplia a superfície de risco para ambientes que ainda não aplicaram as correções disponíveis.

CVE-2026-34362MEDIUMAVideo's WebSocket Token Never Expires Due to Commented-Out Timeout Validation in verifyTokenSocket()EPSS 0.2%CVE-2026-90547MEDIUMWWBN AVideo Missing Authorization via getBookmarks.json.phpEPSS 0.2%CVE-2026-34247MEDIUMAVideo's IDOR in uploadPoster.php Allows Any Authenticated User to Overwrite Scheduled Live Stream Posters and Trigger False Socket NotificationsEPSS 0.2%CVE-2026-90550MEDIUMWWBN AVideo Missing Authorization via mediaSession.json.phpEPSS 0.2%CVE-2026-90539MEDIUMWWBN AVideo Missing Authentication via menuItems.json.phpEPSS 0.2%CVE-2026-90536MEDIUMWWBN AVideo Missing Authorization via adsInfo API EndpointEPSS 0.2%CVE-2026-90541MEDIUMWWBN AVideo Unauthenticated Information Disclosure via menus.json.phpEPSS 0.2%CVE-2026-89240MEDIUMWWBN AVideo Reflected XSS via confirmLivePassword.phpEPSS 0.2%CVE-2026-33650HIGHAVideo's Video Moderator Privilege Escalation via Ownership Transfer Enables Arbitrary Video DeletionEPSS 0.2%CVE-2026-85164HIGHWWBN AVideo Server-Side Request Forgery via set_api_userImagesEPSS 0.2%CVE-2026-34738MEDIUMAVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request ParameterEPSS 0.2%CVE-2026-92583MEDIUMAVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter IncrementEPSS 0.2%CVE-2026-90551MEDIUMWWBN AVideo Missing Authorization via video_from_program APIEPSS 0.2%CVE-2026-27732HIGHAVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.phpEPSS 0.2%CVE-2026-90548MEDIUMWWBN AVideo Missing Authorization in ImageGallery list.json.phpEPSS 0.2%CVE-2026-33512HIGHAVideo has an unauthenticated decrypt oracle leaking any ciphertextEPSS 0.2%CVE-2026-33766MEDIUMAVideo has SSRF Protection Bypass via HTTP Redirect in Image Download EndpointsEPSS 0.2%CVE-2026-34394HIGHAVideo: CSRF on Admin Plugin Configuration Enables Payment Credential HijackingEPSS 0.2%CVE-2026-33499MEDIUMAVideo has Reflected XSS via unlockPassword Parameter in forbiddenPage.php and warningPage.phpEPSS 0.2%CVE-2026-27568MEDIUMAVideo has Stored Cross-Site Scripting via Markdown Comment InjectionEPSS 0.2%