NewNormal Security turns CVEs since the previous batch into new detections, every day. 𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 14 Sep 2026 𝗔𝗱𝗱𝗲𝗱 to NewScan 𝘁𝗼𝗱𝗮𝘆: 🕳️ Video platform feeds that hand the uploader's email address and last-login time to an unauthenticated request, private videos included (WWBN AVideo CVE-2026-90549) 🔓 Admin-only menu APIs answering anonymous callers, exposing the navigation a site hides and the user groups it is gated on (WWBN AVideo CVE-2026-90541) 🔎 AVideo now identified by name and release from the pages it already serves — what makes any advisory against it matchable Test your stack with NewScan — free, self-hosted: https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve #infosec #AppSec #DataExposure #CSO #REDTEAM
Post summary
The post discloses technical details for two WWBN AVideo CVEs involving unauthorized information exposure through unauthenticated or anonymous requests. It does not mention PoC code, exploit tooling, active exploitation, patches, or debunking claims.