https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:26:35 +0000 https://cve.radiocsirt.org/vuln/cve-2026-58002 <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass vulnerability in the Users_affiliations add.json.php endpoint that allows authenticated users to forge two-party consent records by supplying the counterparty&#39;s agreement timestamp. Attackers can create a forged affiliation with status=&#39;a&#39; and then reassign video ownership to arbitrary users through the videoAddNew.json.php endpoint, which trusts the forged affiliation as an authorization term.</p> <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass vulnerability in the Users_affiliations add.json.php endpoint that allows authenticated users to forge two-party consent records by supplying the counterparty&#39;s agreement timestamp. Attackers can create a forged affiliation with status=&#39;a&#39; and then reassign video ownership to arbitrary users through the videoAddNew.json.php endpoint, which trusts the forged affiliation as an authorization term.</p> https://cve.radiocsirt.org/vuln/cve-2026-58002