Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/API/check.ffmpeg.json.php endpoint probes the FFmpeg remote server configuration and returns connectivity status without any authentication. All sibling FFmpeg management endpoints (kill.ffmpeg.json.php, list.ffmpeg.json.php, ffmpeg.php) require User::isAdmin().
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35450 Unauthenticated FFmpeg Server Configuration Disclosure in WWBN AVideo 26.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35450
Post summary
The post announces a newly identified unauthenticated FFmpeg server configuration disclosure (CVE‑2026‑35450) affecting WWBN AVideo 26.0, and links to a vulnerability details page, but provides no PoC, exploit code, or patch information.
CVE-2026-35450 WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/API/check.ffmpeg.json.php endpoint probes the FFmpeg remote server configuration … https://www.cve.org/CVERecord?id=CVE-2026-35450
Post summary
The text announces CVE‑2026‑35450, describing that AVideo versions 26.0 and earlier expose an endpoint that probes FFmpeg remote server configuration; no exploitation evidence, patch, or PoC is mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wwbn | avideo | - | - | - |