CVE-2026-126545

The WWBN AVideo software (versions through 29.7.1 ) is susceptible to a missing authorization vulnerability in the API::get_api_tags() function within plugin/API/API.php. This flaw allows registered users to bypass restrictions by querying the tags API. By subscribing to a tag and querying APINam...