CVE-2026-33488 AVideo has a PGP 2FA Bypass via Cryptographically Broken 512-bit RSA Key Generation in LoginControl Plugin

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the createKeys function in the LoginControl plugin's PGP 2FA system generates 512-bit RSA keys, which have been publicly factorable since 1999. An attacker who obtains a target user's public key can factor the...

CVE-2026-33488

creationtimestamp| type| source ---|---|--- 2026-03-20 17:01:36+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-6m5f-j7w2-w953 2026-03-23 16:52:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqjhu2up52p 2026-03-25 03:40:08+00:00| seen|...