CVE-2026-41062

WWBN AVideo is an open source video platform. In versions 29.0 and below, the directory traversal fix introduced in commit 2375eb5e0 for "objects/aVideoEncoderReceiveImage.json.php" only checks the URL path component via "parseurl$url, PHPURLPATH" for ".." sequences. However, the downstream...