Skip to contentWwbn Avideo-encoder vulnerabilities
- wwbn avideo-encoderAVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titlesCVE-2026-615754.7 Medium
- wwbn avideo-encoderAVideo-Encoder: pre-authentication streamer-login SQL injectionCVE-2026-615697.5 High
- wwbn avideo-encoderAVideo-Encoder: missing authentication on control and status endpointsCVE-2026-615717.3 High
- wwbn avideo-encoderAVideo-Encoder: unauthenticated full-response server-side request forgeryCVE-2026-615728.6 High
- wwbn avideo-encoderAVideo-Encoder: reflected cross-site scripting in the login interfaceCVE-2026-615736.1 Medium
- wwbn avideo-encoderAVideo-Encoder: unauthenticated command execution through streamer login trustCVE-2026-6156710.0 Critical
- wwbn avideo-encoderAVideo-Encoder: unauthenticated installer PHP code injectionCVE-2026-6156410.0 Critical
- wwbn avideo-encoderAVideo-Encoder is Vulnerable to Authenticated SQL Injection via ORDER BY ClauseCVE-2026-330258.6 High
- wwbn avideo-encoderAVideo-Encoder has Unauthenticated Blind Server-Side Request Forgery via Public Thumbnail GeneratorCVE-2026-330249.3 Critical
- wwbn avideo-encoderAVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.phpCVE-2026-29058Public exploitFix available9.8 Critical