NewNormal Security turns CVEs since the previous batch into new detections, every day. 𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 14 Sep 2026 𝗔𝗱𝗱𝗲𝗱 to NewScan 𝘁𝗼𝗱𝗮𝘆: 🕳️ Video platform feeds that hand the uploader's email address and last-login time to an unauthenticated request, private videos included (WWBN AVideo CVE-2026-90549) 🔓 Admin-only menu APIs answering anonymous callers, exposing the navigation a site hides and the user groups it is gated on (WWBN AVideo CVE-2026-90541) 🔎 AVideo now identified by name and release from the pages it already serves — what makes any advisory against it matchable Test your stack with NewScan — free, self-hosted: https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve #infosec #AppSec #DataExposure #CSO #REDTEAM
Post summary
The text discloses two AVideo CVEs (CVE-2026-90549 and CVE-2026-90541) with technical descriptions of information disclosure and access control bypass issues, but provides no PoC, exploit tool, active exploitation evidence, or patch/remediation details.