Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WWBN AVideo is an open source video platform. Prior to 25.0, the /objects/playlistsFromUser.json.php endpoint returns all playlists for any user without requiring authentication or authorization. An unauthenticated attacker can enumerate user IDs and retrieve playlist information including playlist names, video IDs, and playlist status for any user on the platform. This vulnerability is fixed in 25.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-30885 Unauthenticated Playlist Information Disclosure in WWBN AVideo Before 25.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30885
Post summary
The text identifies CVE‑2026‑30885 as an unauthenticated playlist information‑disclosure vulnerability in WWBN AVideo versions prior to 25.0 but does not provide evidence of exploitation, PoC, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wwbn | avideo | - | - | - |