CVE-2026-90539 | WWBN AVideo TopMenu menuItems.json.php menuId missing authentication

September 12, 2026 Yanac

A vulnerability has been found in WWBN AVideo and classified as problematic. Impacted is an unknown function of the file plugin/TopMenu/menuItems.json.php of the component TopMenu. The manipulation of the argument menuId leads to missing authentication.

This vulnerability is listed as CVE-2026-90539. The attack may be initiated remotely. There is no available exploit.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More