Threats Tagged 'cve-2026-33647'
View all threats tagged with 'cve-2026-33647'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-33647'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-33647 is a high-severity vulnerability in WWBN AVideo versions up to 26.0 that allows remote code execution via unrestricted upload of a file with a dangerous extension. The vulnerability arises because the application validates uploaded file content using MIME type detection but does not enforce an allowlist on the file extension derived from the user-supplied filename. Attackers can upload a crafted polyglot file containing valid JPEG headers followed by embedded PHP code with a . php extension. Since the MIME check passes, the file is saved as an executable PHP script in a web-accessible directory, enabling execution of arbitrary code on the server. No user interaction is required beyond file upload, and the exploit requires low privileges. A patch addressing this issue has been committed. Organizations running vulnerable versions should apply the patch immediately and implement stricter file extension validation to prevent exploitation. Join the discussion | CVE Database V5 | 03/23/2026, 18:23:20 UTC Added: 03/23/2026, 18:45:52 UTC |
Showing 1 to 1 of 1 result