Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 05:09:09 +0000 CVE-2026-86721 — AVideo through c3edcc274c Authorization Bypass via Session Cookie https://cve.radiocsirt.org/vuln/cve-2026-86721 <p><strong>Affected:</strong> WWBN AVideo</p> <p>AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named &#39;key&#39; with value &#39;value&#39; overrides the $_REQUEST[&#39;key&#39;] parameter in saveLive.php and related endpoints. Attackers can publish to any user&#39;s RTMP stream without authentication by using the known constant stream key value to hijack live broadcasts.</p> <p><strong>Affected:</strong> WWBN AVideo</p> <p>AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named &#39;key&#39; with value &#39;value&#39; overrides the $_REQUEST[&#39;key&#39;] parameter in saveLive.php and related endpoints. Attackers can publish to any user&#39;s RTMP stream without authentication by using the known constant stream key value to hijack live broadcasts.</p> https://cve.radiocsirt.org/vuln/cve-2026-86721