WWBN AVideo is an open source video platform.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 27, 2026 · NIST NVD

   Detected

   WWBN AVideo is an open source video platform. In versions up to and including 26.0, three endpoints in the Scheduler plugin lack any authentication check, while every other endpoint in the same plugin directories ( , , ) requires . An unauthenticated attacker can retrieve all scheduled tasks (including internal callback URLs and parameters), admin-composed email messages, and user-to-email targeti

2. Jun 17, 2026 · NIST NVD

   Updated

   WWBN AVideo is an open source video platform. In versions up to and including 26.0, three endpoints in the Scheduler plugin lack any authentication check, while every other endpoint in the same plugin directories ( , , ) requires . An unauthenticated attacker can retrieve all scheduled tasks (including internal callback URLs and parameters), admin-composed email messages, and user-to-email targeti

Affected

• cpe wwbn/avideoversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-33761

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33761

  WWBN AVideo is an open source video platform. In versions up to and including 26.0, three endpoints in the Scheduler plugin lack any authentication check, while every other endpoint in the same plugin directories ( , , ) re

  nvd.nist.gov

References

• Patch · github.com
• Exploit · github.com