CVE-2026-55173 | WWBN AVideo up to 29.0 FFmpeg Command Processor functions.php sanitizeFFmpegCommand codeToExecEncrypted os command injection

July 16, 2026 Yanac

A vulnerability categorized as critical has been discovered in WWBN AVideo up to 29.0. This vulnerability affects the function sanitizeFFmpegCommand of the file plugin/API/standAlone/functions.php of the component FFmpeg Command Processor. Such manipulation of the argument codeToExecEncrypted leads to os command injection.

This vulnerability is documented as CVE-2026-55173. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More