https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 04:12:05 +0000 https://cve.radiocsirt.org/vuln/cve-2026-85157 <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables per-video visibility checks when a program_id parameter is supplied. Attackers can enumerate playlist identifiers and retrieve unlisted and group-restricted videos by requesting the RSS feed with any visible playlist id, including empty playlists that return the entire site&#39;s hidden video catalogue.</p> <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables per-video visibility checks when a program_id parameter is supplied. Attackers can enumerate playlist identifiers and retrieve unlisted and group-restricted videos by requesting the RSS feed with any visible playlist id, including empty playlists that return the entire site&#39;s hidden video catalogue.</p> https://cve.radiocsirt.org/vuln/cve-2026-85157