https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:16:32.832202+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-91965 CVE-2026-91965 — WWBN AVideo through 29.0 Broken Access Control via Live Endpoints 2026-10-08T02:16:32.847573+00:00

Affected: WWBN AVideo

WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin/Live/calendar.json.php endpoints. Unauthenticated attackers can retrieve restricted live transmission details including stream keys, titles, descriptions, owner information, and direct HLS playback URLs by accessing these endpoints.