CVE-2026-86190

WWBN AVideo is affected by a broken access control vulnerability in its videoViewsInfo endpoints. When a hash parameter is supplied, the endpoint returns complete user records—including password hashes , recovery tokens , and live session identifiers —to unauthenticated callers. Attackers can lev...

EUVD-2026-72011

WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live session identifiers to unauthenticated callers when a hash parameter is provided. Attackers can use the disclosed session...

PT-2026-86415

Name of the Vulnerable Software and Affected Versions AVideo affected versions not specified Description Broken access control in the 'videoViewsInfo' endpoint allows unauthenticated callers to retrieve complete user records when a hash parameter is provided. The exposed data includes password...