CVE-2026-89257 | WWBN AVideo up to 29.0 Category Asset Deletion categoryDeleteAssets.json.php Category::deleteAssets ID resource injection

A vulnerability was found in WWBN AVideo up to 29.0 and classified as problematic. The impacted element is the function Category::deleteAssets of the file objects/categoryDeleteAssets.json.php of the component Category Asset Deletion. The manipulation of the argument ID results in improper control of resource identifiers.

This vulnerability is known as CVE-2026-89257. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More