CVE-2026-29058

🗓️ 06 Mar 2026 07:30:27Reported by CirclType

circl

circl🔗 cve.circl.lu👁 2 Views

CVE-2026-29058 observed as two seen events from infosec.exchange and bsky.app.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2026-29058	6 Mar 202607:08	–	attackerkb
CNNVD	AVideo 操作系统命令注入漏洞	6 Mar 202600:00	–	cnnvd
CVE	CVE-2026-29058	6 Mar 202607:08	–	cve
Cvelist	CVE-2026-29058 AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php	6 Mar 202607:08	–	cvelist
Github Security Blog	WWBN AVideo is vulnerable to unauthenticated OS Command Injection via base64Url in objects/getImage.php	3 Mar 202620:02	–	github
Metasploit	AVideo Encoder getImage.php Unauthenticated Command Injection	19 Mar 202618:56	–	metasploit
NVD	CVE-2026-29058	6 Mar 202607:16	–	nvd
OSV	CVE-2026-29058 AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php	6 Mar 202607:08	–	osv
OSV	GHSA-9J26-99JH-V26Q WWBN AVideo is vulnerable to unauthenticated OS Command Injection via base64Url in objects/getImage.php	3 Mar 202620:02	–	osv
Packet Storm	📄 AVideo getImage.php Unauthenticated Command Injection	19 Mar 202600:00	–	packetstorm

Source	Link
bsky	www.bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdntuj2q
bsky	www.bsky.app/profile/cve.skyfleet.blue/post/3mgeu2darku2o
bsky	www.bsky.app/profile/offseq.bsky.social/post/3mges5jxeml2u
bsky	www.bsky.app/profile/thehackerwire.bsky.social/post/3mgeu5e54h32h
bsky	www.bsky.app/profile/undercode.bsky.social/post/3mgfd3lf2la2q
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/avideo_encoder_getimage_cmd_injection.rb
infosec	www.infosec.exchange/users/offseq/statuses/116181056039411131

06 Mar 2026 07:30Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19.8

EPSS0.02132

SSVC

vulnerability 2026 seen events infosec exchange bsky app