Lucene search
+L

CVE-2026-92585 AVideo through 29.0 Missing Authorization Check via API Like Endpoint

🗓️ 16 Sep 2026 21:46:52Reported by VulnCheckType 
cvelist
 cvelist
🔗 www.cve.org👁 20 Views

AVideo through 29.0 (commit c3edcc274c389816d434acadac07ee78eaf330c1) fails to validate video access permissions in the API like endpoint, allowing logged-in users to vote on password-protected and group-restricted videos. Attackers can submit lik...

Related
Affected
Refs
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2026-92585
16 Sep 202621:46
cve
euvd
EUVD
EUVD-2026-81285
17 Sep 202600:31
euvd
nvd
NVD
CVE-2026-92585
16 Sep 202622:18
nvd
[
  {
    "vendor": "WWBN",
    "product": "AVideo",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "git",
        "lessThanOrEqual": "c3edcc274c389816d434acadac07ee78eaf330c1"
      },
      {
        "version": "0",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "29.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Sep 2026 21:46Current
CVSS 3.14.3
CVSS 45.3
EPSS0.00158
20