Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WWBN AVideo is an open source video platform. Prior to version 26.0, the `uploadVideoToLinkedIn()` method in the SocialMediaPublisher plugin constructs a shell command by directly interpolating an upload URL received from LinkedIn's API response, without sanitization via `escapeshellarg()`. If an attacker can influence the LinkedIn API response (via MITM, compromised OAuth token, or API compromise), they can inject arbitrary OS commands that execute as the web server user. Version 26.0 contains a fix for the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-22 | 2 | Disclosure2 |
| 2026-03-23 | 1 | Disclosure1 |
CVE-2026-33319 WWBN AVideo is an open source video platform. Prior to version 26.0, the `uploadVideoToLinkedIn()` method in the SocialMediaPublisher plugin constructs a shell comman… https://www.cve.org/CVERecord?id=CVE-2026-33319
Post summary
The post identifies CVE-2026-33319 as a command injection flaw in WWBN AVideo’s SocialMediaPublisher plugin before version 26.0.
CVE-2026-33319 Command Injection Vulnerability in WWBN AVideo Social Media Publisher Plugin Pre-26.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33319
Post summary
CVE‑2026‑33319 describes a command injection flaw in the WWBN AVideo Social Media Publisher Plugin pre‑26.0, with additional details available via the provided link.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-33319 - AVideo Vulnerable to OS Command Injection via Unescaped URL in LinkedIn Video Upload Shell Command Intel Report: https://ift.tt/6cBE5ui
Post summary
CVE-2026-33319 is a command‑injection vulnerability in AVideo's LinkedIn video upload shell, announced with technical details but without any PoC, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wwbn | avideo | - | - | - |