Product by WWBN

    WWBN AVideo-Encoder

    10 known vulnerabilities in WWBN AVideo-Encoder (WWBN), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WWBN AVideo-Encoder (WWBN)
    CriticalCVE-2026-29058

    AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

    		9.8
    CriticalCVE-2026-61564

    AVideo-Encoder: unauthenticated installer PHP code injection

    		10.0
    CriticalCVE-2026-61567

    AVideo-Encoder: unauthenticated command execution through streamer login trust

    		10.0
    HighCVE-2026-61572

    AVideo-Encoder: unauthenticated full-response server-side request forgery

    		8.6
    CriticalCVE-2026-33024

    AVideo-Encoder has Unauthenticated Blind Server-Side Request Forgery via Public Thumbnail Generator

    		9.1
    HighCVE-2026-61569

    AVideo-Encoder: pre-authentication streamer-login SQL injection

    		7.5
    HighCVE-2026-61571

    AVideo-Encoder: missing authentication on control and status endpoints

    		7.3
    HighCVE-2026-33025

    AVideo-Encoder is Vulnerable to Authenticated SQL Injection via ORDER BY Clause

    		8.8
    MediumCVE-2026-61573

    AVideo-Encoder: reflected cross-site scripting in the login interface

    		6.1
    MediumCVE-2026-61575

    AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles

    		4.7

    All products by WWBN