CVE-2026-33650

WWBN AVideo is an open source video platform. In versions up to and including 26.0, a user with the "Videos Moderator" permission can escalate privileges to perform full video management operations — including ownership transfer and deletion of any video — despite the permission being documented ...

CVE-2026-33650

creationtimestamp| type| source ---|---|--- 2026-03-22 23:17:27+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8x77-f38v-4m5j 2026-03-23 19:22:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrulbogn24 2026-03-23 20:21:55+00:0...