SB2026072213 - Missing Authentication for Critical Function in AVideo

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026072213

SB2026072213 - Missing Authentication for Critical Function in AVideo

Published: July 22, 2026

Security Bulletin ID SB2026072213
CSH Severity
High
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Missing Authentication for Critical Function (CVE-ID: N/A)

CWE-ID: CWE-306 - Missing Authentication for Critical Function

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber


The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to missing authentication for critical function in objects/aVideoEncoderChunk.json.php. A remote attacker can write arbitrary content, leading to information disclosure and denial of service (DoS) condition.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References