CVE-2026-81732
WWBN AVideo through 30.0 Information Disclosure via report4.json.php
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts without any session or authorization.
| CWE | CWE-200 |
| Vendor | wwbn |
| Product | avideo |
| Published | Aug 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for wwbn avideo
Be the first to know when new unknown vulnerabilities affecting wwbn avideo are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
WWBN / AVideo
0 ≤ 30.0
References
Credits
🔍 skeletonsec