Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorization checks, exposing PayPal tokens, Authorize.Net webhooks, and Bitcoin transaction records. Unauthenticated attackers can retrieve all payment transaction data including agreement IDs, user financial records, and API responses via direct GET requests to vulnerable endpoints.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56341 Unauthenticated Payment Data Exposure in AVideo Through Version 26.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56341
Post summary
The post announces CVE‑2026‑56341, noting unauthenticated payment data exposure in AVideo up to version 26.0, but it provides no PoC, exploit, patch, or active exploitation details.
🚨*CVE* CVE-2026-56341 AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorization checks, exposing PayPal tokens, Authori… https://www.cve.org/CVERecord?id=CVE-2026-56341 ----- Traducción: CVE-2026-56341 AVi… http://infoflow.cloud`
Post summary
The post announces CVE-2026-56341 for AVideo version 26.0, noting unauthenticated endpoints that expose PayPal tokens; no PoC, exploit, or patch details are provided.
CVE-2026-56341 AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorization checks, exposing PayPal tokens, Authori… https://www.cve.org/CVERecord?id=CVE-2026-56341
Post summary
The text announces CVE-2026-56341, noting that AVideo up to v26.0 has unauthenticated endpoints in payment plugins that expose PayPal tokens and related sensitive data.