CVE-2026-116800

WWBN AVideo versions before 29.5.0 are vulnerable to a Local PHP File Inclusion vulnerability. An unauthenticated attacker can exploit a flaw in the setLanguage() function by providing a crafted Accept-Language header using overlapping traversal sequences like ....// . This allows the attacker to...