WWBN AVideo is an open source video platform.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 27, 2026 · NIST NVD

   Detected

   WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint allows any authenticated user to overwrite the poster image for any scheduled live stream by supplying an arbitrary . The endpoint only checks but never verifies that the authenticated user owns the targeted schedule. After overwriting the poster, the endpoint broadcasts a notification containing the v

2. Jun 17, 2026 · NIST NVD

   Updated

   WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint allows any authenticated user to overwrite the poster image for any scheduled live stream by supplying an arbitrary . The endpoint only checks but never verifies that the authenticated user owns the targeted schedule. After overwriting the poster, the endpoint broadcasts a notification containing the v

Affected

• cpe wwbn/avideoversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-34247

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-34247

  WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint allows any authenticated user to overwrite the poster image for any scheduled live stream by supplying an arbitrary . The endpoint onl

  nvd.nist.gov

References

• Patch · github.com
• Exploit · github.com