Threats Tagged 'cve-2026-86719'
View all threats tagged with 'cve-2026-86719'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-86719'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-86719: Cross-Site Request Forgery (CSRF) in WWBN AVideoCVE-2026-86719 0 CVE-2026-86719 is a cross-site request forgery (CSRF) vulnerability in the WWBN AVideo platform affecting the CustomizeUser plugin endpoint. The vulnerability allows an attacker to cause an authenticated administrator's browser to issue a cross-origin GET request that swaps the administrator's session with a non-admin user account, resulting in loss of administrative access. The swap to another administrator account is rejected, so privilege escalation is not possible. The JSON response also discloses the session_id. The CustomizeUser plugin is enabled by default, and no patch was available at the time of publication. Join the discussion | CVE Database V5 | 09/08/2026, 15:13:53 UTC Added: 09/08/2026, 15:29:01 UTC |
Showing 1 to 1 of 1 result