Missing Authentication for Critical Function in AVideo - #VU139053

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU139053

Missing Authentication for Critical Function in AVideo - #VU139053

Published: July 22, 2026


Vulnerability identifier: #VU139053
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber
CVE-ID: N/A
CWE-ID: CWE-306
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vendor: World Wide Broadcast Network
Affected software:
AVideo

Detailed vulnerability description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to missing authentication for critical function in objects/aVideoEncoderChunk.json.php. A remote attacker can write arbitrary content, leading to information disclosure and denial of service (DoS) condition.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Sources