CVE-2026-89248 | WWBN AVideo WebRTC status.json.php User::isLogged improper authorization

September 11, 2026 Yanac

A vulnerability, which was classified as problematic, was found in WWBN AVideo. This affects the function User::isLogged of the file plugin/WebRTC/status.json.php of the component WebRTC. Such manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-89248. The attack may be launched remotely. There is no exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More