Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/04/07 11:01 p.m.•16 views

CVE-2026-35449

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP...

5.3CVSS5.9AI score0.00341EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/06 10:16 p.m.•22 views

CVE-2026-35449

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP...

5.3CVSS0.00341EPSS
SaveExploits1References1
OSV
OSV
•added 2026/04/06 9:46 p.m.•18 views

CVE-2026-35449 WWBN AVideo has Unauthenticated Information Disclosure via Disabled CLI Guard in install/test.php

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP...

5.3CVSS5.9AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/06 9:46 p.m.•7 views

CVE-2026-35449

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP...

5.3CVSS5.9AI score0.00341EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/06 9:46 p.m.•10 views

CVE-2026-35449 WWBN AVideo has Unauthenticated Information Disclosure via Disabled CLI Guard in install/test.php

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP...

5.3CVSS5.8AI score0.00341EPSS
SaveExploits1References1
Rows per page
Query Builder