CVE-2026-33649 | WWBN AVideo up to 26.0 Endpoint setPermission.json.php cross-site request forgery

March 23, 2026 Yanac

A vulnerability was found in WWBN AVideo up to 26.0. It has been declared as problematic. This issue affects some unknown processing of the file plugin/Permissions/setPermission.json.php of the component Endpoint. The manipulation results in cross-site request forgery.

This vulnerability is cataloged as CVE-2026-33649. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More