Emissary has Stored XSS via Navigation Template Link Injection

Summary Mustache navigation templates interpolated configuration-controlled link values directly into href attributes without URL scheme validation. An administrator who could modify the navItems configuration could inject javascript: URIs, enabling stored cross-site scripting XSS against other...

CVE-2026-39370

WWBN AVideo is an open source video platform. In versions 26.0 and prior, objects/aVideoEncoder.json.php still allows attacker-controlled downloadURL values with common media or archive extensions such as .mp4, .mp3, .zip, .jpg, .png, .gif, and .webm to bypass SSRF validation. The server then...

CVE-2026-39368

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the Live restream log callback flow accepted an attacker-controlled restreamerURL and later fetched that stored URL server-side, enabling stored SSRF for authenticated streamers. The vulnerable flow allowed a low-privilege...

CVE-2026-27787

creationtimestamp| type| source ---|---|--- 2026-04-07 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN33581068/ 2026-04-08 07:51:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixspefv4u2i...

CVE-2026-24913

creationtimestamp| type| source ---|---|--- 2026-04-07 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN33581068/ 2026-04-08 06:19:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixnln6bez2h 2026-04-08 07:15:31+00:00| seen|...

CVE-2026-39341

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:49+00:00| seen| Telegram/KxTaYuDzH0Z1i49WRh0FHus2MwhOECzgEb0vJJCyVaWiEf0 2026-04-07 19:36:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwjnkiisb22 2026-04-08 07:21:32+00:00| seen|...

CVE-2026-39338

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:49+00:00| seen| Telegram/KxTaYuDzH0Z1i49WRh0FHus2MwhOECzgEb0vJJCyVaWiEf0 2026-04-07 19:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwkqntz4a2j...

CVE-2026-39340

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:49+00:00| seen| Telegram/KxTaYuDzH0Z1i49WRh0FHus2MwhOECzgEb0vJJCyVaWiEf0 2026-04-07 20:06:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwlckqos32s 2026-04-08 07:04:18+00:00| seen|...

CVE-2026-39343

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:49+00:00| seen| Telegram/KxTaYuDzH0Z1i49WRh0FHus2MwhOECzgEb0vJJCyVaWiEf0 2026-04-13 00:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjdl3qnmlq22...

CVE-2026-24146

creationtimestamp| type| source ---|---|--- 2026-04-07 19:34:38+00:00| seen| Telegram/H9-wLQyAW-fjKUXTN1LxHiROu7RUaGwpmVWmVHEm8VlmA 2026-04-13 11:02:10+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mjepozttj22v 2026-06-08 12:37:08+00:00| seen|...

CVE-2026-24173

creationtimestamp| type| source ---|---|--- 2026-04-07 19:34:38+00:00| seen| Telegram/H9-wLQyAW-fjKUXTN1LxHiROu7RUaGwpmVWmVHEm8VlmA 2026-04-13 11:02:11+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mjepozttj22v 2026-04-17 01:07:08+00:00| seen|...

CVE-2026-5735

creationtimestamp| type| source ---|---|--- 2026-04-07 19:33:24+00:00| seen| Telegram/UR5TCX5vufcj9skQtsOGmPNpHO32u3eWlC-vhPXaaDs7Lc 2026-04-08 12:10:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3miyb6aeqsg2z 2026-04-11 23:28:41+00:00| seen|...

GHSA-33QG-7WPP-89CQ

creationtimestamp| type| source ---|---|--- 2026-04-07 19:32:20+00:00| seen| https://bsky.app/profile/getajobmike.ruby.social.ap.brid.gy/post/3miwjflst6ug2 2026-04-07 19:35:24+00:00| seen| Telegram/d9ntGhgAXUNib3HVhoGCh5gTeuhEkXLp8JxGb0TRA4y7Jks...

CVE-2026-25357

creationtimestamp| type| source ---|---|--- 2026-04-07 19:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miwjbs7ga22h...

CVE-2026-39370

WWBN AVideo (versions 26.0 and prior) is affected by CVE-2026-39370. The flaw resides in objects/aVideoEncoder.json.php which still accepts attacker-controlled downloadURL values with common media or archive extensions (e.g., .mp4, .mp3, .zip, .jpg, .png, .gif, .webm) that bypass SSRF validation....

CVE-2026-39370

WWBN AVideo is an open source video platform. In versions 26.0 and prior, objects/aVideoEncoder.json.php still allows attacker-controlled downloadURL values with common media or archive extensions such as .mp4, .mp3, .zip, .jpg, .png, .gif, and .webm to bypass SSRF validation. The server then...

CVE-2026-39370 WWBN AVideo has an Allowlisted downloadURL media extensions bypass SSRF protection and enable internal response exfiltration (Incomplete fix for CVE-2026-27732)

WWBN AVideo is an open source video platform. In versions 26.0 and prior, objects/aVideoEncoder.json.php still allows attacker-controlled downloadURL values with common media or archive extensions such as .mp4, .mp3, .zip, .jpg, .png, .gif, and .webm to bypass SSRF validation. The server then...

CVE-2026-39369 WWBN AVideo's GIF poster fetch bypasses traversal scrubbing and exposes local files through public media URLs

WWBN AVideo is an open source video platform. In versions 26.0 and prior, objects/aVideoEncoderReceiveImage.json.php allowed an authenticated uploader to fetch attacker-controlled same-origin /videos/... URLs, bypass traversal scrubbing, and expose server-local files through the GIF poster storag...

CVE-2026-39367

WWBN AVideo (versions 26.0 and earlier) has a stored XSS vector in the EPG page. The EPG feature parses XML from user-controlled URLs and renders elements directly into HTML without sanitization, allowing a user with upload permission to point epg_link to a malicious XML to trigger JavaScript ex...

EUVD-2026-19869

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validateenrichmenturl function in src/handler/http/request/enrichmenttable/mod.rs fails to block IPv6 addresses because Rust's url crate returns them with surrounding brackets e.g. "::1" not "::1". An authenticated...