Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:58:11 +0000 CVE-2026-91965 — WWBN AVideo through 29.0 Broken Access Control via Live Endpoints https://cve.radiocsirt.org/vuln/cve-2026-91965 <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin/Live/calendar.json.php endpoints. Unauthenticated attackers can retrieve restricted live transmission details including stream keys, titles, descriptions, owner information, and direct HLS playback URLs by accessing these endpoints.</p> <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin/Live/calendar.json.php endpoints. Unauthenticated attackers can retrieve restricted live transmission details including stream keys, titles, descriptions, owner information, and direct HLS playback URLs by accessing these endpoints.</p> https://cve.radiocsirt.org/vuln/cve-2026-91965