1 matches found
CVE-2026-82643: Improper Restriction of Excessive Authentication Attempts
WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attackers can submit correct credentials repeatedly to trigger uncapped two-factor confirmation emails and perform sustaine...
6.9CVSS5.8AI score0.00345EPSS
SaveExploits0References2
20