2 matches found
PT-2026-87117
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of live restreams id in resendRestreamer.json.php, allowing authenticated users with canStream to access other users' restream destinations. Attackers can broadcast their live stream to victim-configur...
8.6CVSS5.8AI score0.00363EPSS
SaveExploits0References3
CVE-2026-86720: Authorization Bypass Through User-Controlled Key
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of liverestreamsid in resendRestreamer.json.php, allowing authenticated users with canStream to access other users' restream destinations. Attackers can broadcast their live stream to victim-configured...
8.6CVSS5.9AI score0.00363EPSS
SaveExploits0References2
20