CVE-2026-33684 | WWBN AVideo up to 28.x signUp API set_api_signUp emailVerified/canUpload/canStream/canCreateMeet permission

July 15, 2026 Yanac

A vulnerability labeled as critical has been found in WWBN AVideo up to 28.x. This impacts the function set_api_signUp of the component signUp API. The manipulation of the argument emailVerified/canUpload/canStream/canCreateMeet results in permission issues.

This vulnerability is known as CVE-2026-33684. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More