CVE-2026-34731

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo onpublishdone.php endpoint in the Live plugin allows unauthenticated users to terminate any active live stream. The endpoint processes RTMP callback events to mark streams as finished in the database, but perform...

CVE-2026-34731

creationtimestamp| type| source ---|---|--- 2026-03-30 12:35:59+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-4jcg-jxpf-5vq3 2026-03-31 22:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mif76lhbfr2q 2026-03-31 23:20:06+00:00|...