https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:24:33.140232+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-86186 CVE-2026-86186 — AVideo API Rate Limit Bypass via Bot User-Agent Header 2026-10-07T19:24:33.156436+00:00

Affected: WWBN AVideo

AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eight protected operations including login brute-force protection. Attackers can send requests with a bot User-Agent to disable rate limiting and perform unlimited password guessing attempts against any account from a single IP address.