Vulnerabilidades en WWBN

323 resultados
Análisis Vexday

O portfólio de vulnerabilidades do WWBN reúne 187 CVEs catalogadas, com 30 classificadas como críticas e 67 surgidas apenas nos últimos 90 dias — volume recente que indica aceleração no ritmo de descoberta e demanda atenção contínua ao ciclo de atualização. Embora nenhuma CVE esteja no catálogo KEV da CISA, situando a taxa de exploração ativa abaixo da média geral do catálogo, o CVE-2022-30690 apresenta EPSS de 0,8358, sinalizando alta probabilidade estimada de exploração e devendo ser tratado com prioridade. A falha mais recorrente é CWE-79 (Cross-Site Scripting), categoria que, combinada com a existência de ao menos uma prova de conceito pública, amplia a superfície de risco para ambientes que ainda não aplicaram as correções disponíveis.

CVE-2026-85160HIGHAVideo through c91b5975d CSRF and Path Traversal via stopLive.phpEPSS 0.2%CVE-2026-90537HIGHWWBN AVideo Scheduler sendEmail Missing Authorization via TokenEPSS 0.2%CVE-2026-90552MEDIUMWWBN AVideo Missing Authorization via Playlists_schedules list.json.phpEPSS 0.2%CVE-2026-39368MEDIUMWWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal servicesEPSS 0.2%CVE-2026-85163HIGHAVideo Server-Side Request Forgery via epg_link parameterEPSS 0.2%CVE-2026-39370HIGHWWBN AVideo has an Allowlisted downloadURL media extensions bypass SSRF protection and enable internal response exfiltration (Incomplete fix for CVE-2026-27732)EPSS 0.2%CVE-2026-90549MEDIUMWWBN AVideo Missing Authorization via videosAndroid.json.php EndpointEPSS 0.2%CVE-2026-85156MEDIUMWWBN AVideo Broken Access Control via Channel PageEPSS 0.2%CVE-2026-85157MEDIUMWWBN AVideo Broken Access Control via feed/index.php program_idEPSS 0.2%CVE-2026-33731MEDIUMAVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment DataEPSS 0.2%CVE-2026-82643MEDIUMWWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.phpEPSS 0.2%CVE-2026-92584MEDIUMAVideo through 29.0 Stored Cross-Site Scripting via User-Agent HeaderEPSS 0.2%CVE-2026-34613MEDIUMAVideo: CSRF on Plugin Enable/Disable Endpoint Allows Disabling Security PluginsEPSS 0.2%CVE-2026-82648HIGHWWBN AVideo SSRF Filter Bypass via NAT64 Hex AddressEPSS 0.2%CVE-2026-89241MEDIUMWWBN AVideo Reflected XSS via confirmLivePassword.phpEPSS 0.2%CVE-2026-39367MEDIUMWWBN AVideo has Stored XSS via Malicious EPG XML Program Titles in AVideo EPG PageEPSS 0.2%CVE-2026-89252HIGHAVideo Missing Authorization in addLiveLink.php LiveLink UpdateEPSS 0.2%CVE-2026-45620MEDIUMAVideo CVE-2026-43881 incomplete fix - `objects/mention.json.php:17` is an unauthenticated user enumerationEPSS 0.2%CVE-2026-33296LOWAVideo has an Open Redirect via Unvalidated redirectUri in userLogin.phpEPSS 0.2%CVE-2026-43882MEDIUMWWBN AVideo: Unauthenticated CRLF/ICS Injection in Scheduler downloadICS.php Allows Calendar Event SpoofingEPSS 0.2%