https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:02:06.780111+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-362474 EUVD-2026-362474 2026-10-05T20:02:06.833822+00:00 EUVD-2026-362474 https://cve.radiocsirt.org/vuln/fkie_cve-2026-83595 fkie_cve-2026-83595 2026-10-05T20:02:06.833861+00:00

AVideo contains a cross-site request forgery vulnerability in plugin/API/set.json.php that allows attackers to perform state-changing actions by crafting GET requests that bypass CSRF protection. Attackers can navigate a victim's browser to a malicious URL with API parameters to delete videos, deactivate accounts, or modify playlists without user interaction.

 https://cve.radiocsirt.org/vuln/ghsa-rpxm-6hm8-cc7x GHSA-rpxm-6hm8-cc7x 2026-10-05T20:02:06.833896+00:00

AVideo contains a cross-site request forgery vulnerability in plugin/API/set.json.php that allows attackers to perform state-changing actions by crafting GET requests that bypass CSRF protection. Attackers can navigate a victim's browser to a malicious URL with API parameters to delete videos, deactivate accounts, or modify playlists without user interaction.