Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WWBN AVideo is an open source video platform. In 29.0 and earlier, view/update.php reads $_POST['updateFile'] as a relative path under updatedb/ and passes it to PHP's file() for line-by-line execution as part of a database migration. An authenticated administrator can abuse this to read arbitrary text files reachable from the web-server process.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 AVideo, Authenticated Arbitrary File Read, #CVE-2026-45731 (Medium) https://dailycve.com/avideo-authenticated-arbitrary-file-read-cve-2026-45731-medium/
Post summary
The text announces a medium‑severity authenticated arbitrary file read vulnerability (CVE‑2026‑45731) in AVideo, but does not provide evidence of exploitation, a PoC, or a patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wwbn | avideo | - | - | - |