https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T10:45:55.010666+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-59256 CVE-2026-59256 — WWBN AVideo Unbound Token Authorization Bypass via Gallery 2026-10-10T10:45:55.031098+00:00

Affected: WWBN AVideo

WWBN AVideo through commit 9c39d8c8 contains an authorization bypass vulnerability where getToken() creates tokens without binding to user identity or purpose, and plugin/Gallery/view/sections.php issues valid tokens to unauthenticated visitors. Attackers can retrieve a token from the Gallery endpoint and use it to bypass authorization checks in other subsystems like view/hls.php to access restricted video content.