CVE-2026-33867 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo allows content owners to password-protect individual videos. The vide…
Critical CVSS: 9.1

CVE-2026-33867

WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo allows content owners to password-protect individual videos. The video password is stored in the database in plaintext — no hashing, salting, or encryption is applied. If an attacker gains read access to the database (via SQL injection, a database backup, or misconfigured access controls), they obtain all video passwords in cleartext. Commit f2d68d2adbf73588ea61be2b781d93120a819e36 contains a patch.
Vendor
Wwbn
Product
Avideo
CWE
CWE-312
Yayın Tarihi
2026-03-27 17:16:29
Güncelleme
2026-03-31 16:43:15
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-312 Avideo CRITICAL Wwbn 2026

Referanslar

https://github.com/WWBN/AVideo/commit/f2d68d2adbf73588ea61be2b781d93120a819e36 https://github.com/WWBN/AVideo/security/advisories/GHSA-363v-5rh8-23wg https://github.com/WWBN/AVideo/security/advisories/GHSA-363v-5rh8-23wg