en
WWBN, the World Wide Broadcasting Network, is an organization focused on infrastructure for independent online video and Internet television. It develops registry, discovery, guide, and ecosystem services that help connect independently operated video platforms with broader distribution and viewing environments. Its supported scope includes global, platform-neutral collaboration across open-source and commercial video services.
As of 10/26/2026, WWBN recorded 131 security vulnerabilities in the last 90 days across 1 products, including 66 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, AVideo had the most security vulnerabilities in the WWBN ecosystem, with 131 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-116800WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language HeaderCVE-2026-116139WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown RenderingCVE-2026-114634WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL RedirectCVE-2026-114633WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.phpCVE-2026-114048WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-116800WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header | Exploitation statusNot confirmed | FixYes |
| Published10/26/2026 |
| SeverityMedium |
CVE-2026-116139WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering | Exploitation statusNot exploited | FixYes | Affected productAVideo | Published10/25/2026 | SeverityMedium |
|---|
CVE-2026-114634WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect | Exploitation statusNot exploited | FixYes | Affected productAVideo | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-114633WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php | Exploitation statusNot confirmed | FixYes | Affected productAVideo | Published10/22/2026 | SeverityHigh |
|---|
CVE-2026-114048WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints | Exploitation statusNot confirmed | FixYes | Affected productAVideo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-105086WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title | Exploitation statusActively exploited | FixYes | Affected productAVideo | Published10/04/2026 | SeverityCritical |
|---|
CVE-2026-105089WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates | Exploitation statusActively exploited | FixYes | Affected productAVideo | Published10/04/2026 | SeverityCritical |
|---|
CVE-2026-100630AVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 Field | Exploitation statusActively exploited | FixYes | Affected productAVideo | Published09/26/2026 | SeverityMedium |
|---|
CVE-2026-92915WWBN AVideo userVerifyEmail.php Unauthenticated Access Control | Exploitation statusActively exploited | FixYes | Affected productAVideo | Published09/17/2026 | SeverityMedium |
|---|
CVE-2026-92914AVideo LoginControl PGP Second Factor Authentication Bypass | Exploitation statusNot exploited | FixYes | Affected productAVideo | Published09/17/2026 | SeverityHigh |
|---|
351 Results | Page 1 of 36