
NewNormal Security turns CVEs since the previous batch into new detections, every day. 𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 14 Sep 2026 𝗔𝗱𝗱𝗲𝗱 to NewScan 𝘁𝗼𝗱𝗮𝘆: 🕳️ Video platform feeds that hand the uploader's email address and last-login time to an unauthenticated request, private videos included (WWBN AVideo CVE-2026-90549) 🔓 Admin-only menu APIs answering anonymous callers, exposing the navigation a site hides and the user groups it is gated on (WWBN AVideo CVE-2026-90541) 🔎 AVideo now identified by name and release from the pages it already serves — what makes any advisory against it matchable Test your stack with NewScan — free, self-hosted: https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve #infosec #AppSec #DataExposure #CSO #REDTEAM
