CVE-2026-89247 | WWBN AVideo AD_Server VMAP.php getVMAPSFromRequest vmaps xml injection

September 11, 2026 Yanac

A vulnerability, which was classified as critical, has been found in WWBN AVideo. Affected by this issue is the function AD_Server::getVMAPSFromRequest of the file plugin/AD_Server/VMAP.php of the component AD_Server. This manipulation of the argument vmaps causes xml injection.

This vulnerability appears as CVE-2026-89247. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More