WWBN AVideo is an open source video platform.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 23, 2026 · NIST NVD

   Detected

   WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint performs no authentication or authorization checks, allowing any unauthenticated attacker to extract ad campaign analytics data including video titles, user channel names, user IDs, ad campaign names, and impression/click counts. The HTML counterpart ( ) and CSV export ( ) both correctly enforce , but

2. Jun 17, 2026 · NIST NVD

   Updated

   WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint performs no authentication or authorization checks, allowing any unauthenticated attacker to extract ad campaign analytics data including video titles, user channel names, user IDs, ad campaign names, and impression/click counts. The HTML counterpart ( ) and CSV export ( ) both correctly enforce , but

Affected

• cpe wwbn/avideoversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-33685

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33685

  WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint performs no authentication or authorization checks, allowing any unauthenticated attacker to extract ad campaign analytics data including video tit

  nvd.nist.gov

References

• Patch · github.com
• Exploit · github.com