Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/CloneSite/client.log.php endpoint serves the clone operation log file without any authentication. Every other endpoint in the CloneSite plugin directory enforces User::isAdmin(). The log contains internal filesystem paths, remote server URLs, and SSH connection metadata.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-06 | 1 | Disclosure1 |
| 2026-04-07 | 1 | General1 |
CVE-2026-35452 Unauthenticated Information Disclosure in WWBN AVideo CloneSite Plugin 26.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35452
Post summary
The text merely references CVE-2026-35452, an unauthenticated information disclosure in WWBN AVideo CloneSite Plugin 26.0, without providing further details or actionable information.
CVE-2026-35452 WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/CloneSite/client.log.php endpoint serves the clone operation log file without any… https://www.cve.org/CVERecord?id=CVE-2026-35452
Post summary
The CVE-2026-35452 disclosure notes that WWBN AVideo versions 26.0 and earlier expose the clone operation log via the plugin/CloneSite/client.log.php endpoint, revealing potentially sensitive data. No exploitation or patch details are mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wwbn | avideo | - | - | - |