CVE-2026-72748

creationtimestamp| type| source ---|---|--- 2026-08-11 13:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msspe3zeol2o...

CVE-2026-72748

AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows remote attackers to write up to 4 GB of arbitrary content to the server filesystem via HTTP PUT requests without authentication. Attackers can exhaust disk space causing...