Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/08 4:18 p.m.•9 views

CVE-2026-86729

WWBN AVideo through commit e01e41ecc no patched version available exposes getapipreauthorize in plugin/API/API.php as a second, undocumented login path. Unlike getapisignIn, which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit, getapipreauthorize performs the same credentia...

9.1CVSS0.00381EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/08 3:14 p.m.•22 views

CVE-2026-86729

WWBN AVideo through commit e01e41ecc (no patched version available) exposes get_api_preauthorize in plugin/API/API.php as an undocumented login path. Unlike get_api_signIn , which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit(), this endpoint performs the same credential c...

9.1CVSS5.9AI score0.00381EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/08 3:14 p.m.•36 views

CVE-2026-86729 WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize

WWBN AVideo through commit e01e41ecc no patched version available exposes getapipreauthorize in plugin/API/API.php as a second, undocumented login path. Unlike getapisignIn, which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit, getapipreauthorize performs the same credentia...

9.1CVSS0.00381EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/08 3:14 p.m.•12 views

EUVD-2026-72865

WWBN AVideo through commit e01e41ecc no patched version available exposes getapipreauthorize in plugin/API/API.php as a second, undocumented login path. Unlike getapisignIn, which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit, getapipreauthorize performs the same credentia...

9.1CVSS5.9AI score0.00381EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/08 3:14 p.m.•8 views

CVE-2026-86729 WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize

WWBN AVideo through commit e01e41ecc no patched version available exposes getapipreauthorize in plugin/API/API.php as a second, undocumented login path. Unlike getapisignIn, which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit, getapipreauthorize performs the same credentia...

9.1CVSS5.9AI score0.00381EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-87126

WWBN AVideo through commit e01e41ecc no patched version available exposes get api preauthorize in plugin/API/API.php as a second, undocumented login path. Unlike get api signIn, which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit, get api preauthorize performs the same...

9.1CVSS5.9AI score0.00381EPSS
SaveExploits0References3
Rows per page
Query Builder