Threats Tagged 'cve-2026-33685'
View all threats tagged with 'cve-2026-33685'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-33685'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-33685 is a medium severity vulnerability in WWBN AVideo versions up to 26.0 where the JSON API endpoint for ad campaign reports lacks any authentication or authorization checks. This allows unauthenticated attackers to access sensitive ad analytics data including video titles, user channel names, user IDs, ad campaign names, and impression/click counts. While the HTML and CSV report endpoints enforce admin checks, the JSON endpoint was left unprotected. The vulnerability does not allow modification of data or system compromise but leaks confidential business and user information. A patch has been committed to fix this missing authorization issue. Organizations using affected versions should update promptly to prevent unauthorized data disclosure. Join the discussion | CVE Database V5 | 03/23/2026, 18:42:45 UTC Added: 03/23/2026, 19:00:54 UTC |
Showing 1 to 1 of 1 result