CVE-2026-126805

WWBN AVideo versions through 29.7.1 are susceptible to an incorrect authorization vulnerability. Delegated Videos Admin users can obtain video_id_hash values associated with any video owner by accessing encoder endpoints such as aVideoEncoderStatus.json.php. An attacker can exploit this by reques...