CVE-2026-61567 | WWBN AVideo-Encoder up to 8.0.x Live Streaming Endpoint objects/Login.php Login::run webSiteRootURL/APISecret os command injection

October 29, 2026 Yanac

A vulnerability classified as critical has been found in WWBN AVideo-Encoder up to 8.0.x. This issue affects the function Login::run of the file objects/Login.php of the component Live Streaming Endpoint. This manipulation of the argument webSiteRootURL/APISecret causes os command injection.

This vulnerability is registered as CVE-2026-61567. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More