CVE-2026-84481
WWBN AVideo through 30.0 Information Disclosure via MobileManager
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthenticated visitors. Attackers can send an unauthenticated GET request to plugin/MobileManager/getConfiguration.json.php to obtain TLS private key file paths, socket configuration details, platform version, and debug flags enabling further targeted attacks.
| CWE | CWE-200 |
| Vendor | wwbn |
| Product | avideo |
| Published | Sep 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for wwbn avideo
Be the first to know when new unknown vulnerabilities affecting wwbn avideo are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
WWBN / AVideo
0 ≤ 30.0
References
Credits
🔍 skeletonsec