CVE-2026-33297 | WWBN AVideo up to 25.x setPassword.json.php Password authorization (GHSA-6547-8hrg-c55m)

March 23, 2026 Yanac

A vulnerability identified as problematic has been detected in WWBN AVideo up to 25.x. This impacts an unknown function of the file setPassword.json.php. Performing a manipulation of the argument Password results in authorization bypass.

This vulnerability is known as CVE-2026-33297. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More