Threats tagged 'ghsa-5m6p-rj9g-rr93'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2026-126541WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in Live plugin restream endpoints that High8.62026-11-11GCVE DatabaseCVE-2026-126541 WWBN AVideo versions up to 29.7.1 have a missing authorization vulnerability in the Live plugin's restream endpoints. This flaw allows authenticated streamers to access other users' stream keys by manipulating live_transmitions_history_id parameters. Exploiting this, attackers can retrieve victims' HLS URLs and stream keys, enabling them to impersonate victims or restream private or pay-per-view live streams. Report on CVE-2026-126541 Vulnerability CWE-639 #ghsa-5m6p-rj9g-rr93	GCVE Database	2026-11-11

Page 1 of 1