https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T23:38:54.255766+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365139 EUVD-2026-365139 2026-10-08T23:38:54.309566+00:00 EUVD-2026-365139 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86728 fkie_cve-2026-86728 2026-10-08T23:38:54.309615+00:00

AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and private EPG schedules to unauthenticated users. Attackers can request the endpoint with sequential user or playlist IDs to retrieve sensitive credentials, server identifiers, and complete programme schedules without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-gwf3-rchx-m7g8 GHSA-gwf3-rchx-m7g8 2026-10-08T23:38:54.309663+00:00

AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and private EPG schedules to unauthenticated users. Attackers can request the endpoint with sequential user or playlist IDs to retrieve sensitive credentials, server identifiers, and complete programme schedules without authentication.