CVE-2026-90538

WWBN AVideo versions through commit c3edcc274c389816d434acadac07ee78eaf330c1 contain a missing authorization vulnerability in playlistsFromUser.json.php . The root cause is improper cache keying that conflates requests across different user contexts, allowing unauthenticated attackers to retrieve...

CVE-2026-90538 WWBN AVideo Missing Authorization via playlistsFromUser.json.php

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in playlistsFromUser.json.php that allows unauthenticated attackers to read private playlists by requesting another user's identifier. Attackers can retrieve Favorite and Watch Later...

CVE-2026-90538 WWBN AVideo Missing Authorization via playlistsFromUser.json.php

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in playlistsFromUser.json.php that allows unauthenticated attackers to read private playlists by requesting another user's identifier. Attackers can retrieve Favorite and Watch Later...

CVE-2026-90538: Exposure of Sensitive Information to an Unauthorized Actor

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in playlistsFromUser.json.php that allows unauthenticated attackers to read private playlists by requesting another user's identifier. Attackers can retrieve Favorite and Watch Later...