CVE-2026-40908
WWBN AVideo is an open source video platform.
Published Apr 21, 2026 · updated Jun 17, 2026 · wwbn avideo
WWBN AVideo is an open source video platform. In versions 29.0 and prior, the file at the web root executes and returns the full output as JSON to any unauthenticated user. This exposes the exact deployed commit hash (enabling version fingerprinting against known CVEs), developer names and email addresses (PII), and commit messages which may contain references to internal systems or security fixes. As of time of publication, no known patched versions are available.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 21, 2026 · NIST NVD
Detected
WWBN AVideo is an open source video platform. In versions 29.0 and prior, the file at the web root executes and returns the full output as JSON to any unauthenticated user. This exposes the exact deployed commit hash (enabling version fingerprinting against known CVEs), developer names and email addresses (PII), and commit messages which may contain references to internal systems or security fixes
Jun 17, 2026 · NIST NVD
Updated
WWBN AVideo is an open source video platform. In versions 29.0 and prior, the file at the web root executes and returns the full output as JSON to any unauthenticated user. This exposes the exact deployed commit hash (enabling version fingerprinting against known CVEs), developer names and email addresses (PII), and commit messages which may contain references to internal systems or security fixes
Affected
- cpe wwbn/avideoversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-40908
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-40908
WWBN AVideo is an open source video platform. In versions 29.0 and prior, the file at the web root executes and returns the full output as JSON to any unauthenticated user. This exposes the exact deployed commit hash (enabling version fingerprinting ag
nvd.nist.gov