CVE-2026-41064
WWBN AVideo is an open source video platform.
Published Apr 22, 2026 · updated Jun 17, 2026 · wwbn avideo
WWBN AVideo is an open source video platform. In versions up to and including 29.0, an incomplete fix for AVideo's adds for wget but leaves the and code paths unsanitized, and the URL validation regex accepts strings like . Commit 78bccae74634ead68aa6528d631c9ec4fd7aa536 contains an updated fix.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 22, 2026 · NIST NVD
Detected
WWBN AVideo is an open source video platform. In versions up to and including 29.0, an incomplete fix for AVideo's adds for wget but leaves the and code paths unsanitized, and the URL validation regex accepts strings like . Commit 78bccae74634ead68aa6528d631c9ec4fd7aa536 contains an updated fix.
Jun 17, 2026 · NIST NVD
Updated
WWBN AVideo is an open source video platform. In versions up to and including 29.0, an incomplete fix for AVideo's adds for wget but leaves the and code paths unsanitized, and the URL validation regex accepts strings like . Commit 78bccae74634ead68aa6528d631c9ec4fd7aa536 contains an updated fix.
Affected
- cpe wwbn/avideoversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-41064
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-41064
WWBN AVideo is an open source video platform. In versions up to and including 29.0, an incomplete fix for AVideo's adds for wget but leaves the and code paths unsanitized, and the URL validation regex accepts string
nvd.nist.gov