CVE-2026-114633

The software WWBN AVideo versions prior to 29.4.0 is vulnerable to an incorrect authorization vulnerability. An attacker with delegated Users Admin privileges can target administrator accounts through the confirmDeleteUser.json.php or userAddNew.json.php endpoints. Successful exploitation allows ...