Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that allows unauthenticated attackers to retrieve channel owner email addresses by supplying a public channel name parameter. Attackers can enumerate all creator email addresses by iterating through public channel names and extract them from the itunes:email and itunes:author RSS elements, enabling account takeover attempts and phishing campaigns.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56380 AVideo Information Exposure via Public Channel Name Exposes Owner Emails https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56380
Post summary
The text announces CVE‑2026‑56380, stating it is an information‑exposure flaw in AVideo that exposes owner emails via public channel names, but provides no PoC, exploitation details, or patch information.