CVE-2026-34247

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/Live/uploadPoster.php` endpoint allows any authenticated user to overwrite the poster image for any scheduled live stream by supplying an arbitrary `live_schedule_id`. The endpoint only checks `User::isLogged()` but never verifies that the authenticated user owns the targeted schedule. After overwriting the poster, the endpoint broadcasts a `socketLiveOFFCallback` notification containing the victim's broadcast key and user ID to all connected WebSocket clients. Commit 5fcb3bdf59f26d65e203cfbc8a685356ba300b60 fixes the issue.

• CWE-862

• https://github.com/WWBN/AVideo/commit/5fcb3bdf59f26d65e203cfbc8a685356ba300b60Patch
• https://github.com/WWBN/AVideo/security/advisories/GHSA-g3hj-mf85-679gExploit, Vendor Advisory

Published

Mar 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34241CtrlPanel is open-source billing software for hosting provid…8.7
• CVE-2026-34242Weblate is a web based localization tool. In versions prior …7.7
• CVE-2026-34243wenxian is a tool to generate BIBTEX files from given identi…9.8
• CVE-2026-34244Weblate is a web based localization tool. In versions prior …5
• CVE-2026-34245WWBN AVideo is an open source video platform. In versions up…6.3
• CVE-2026-34246CtrlPanel is open-source billing software for hosting provid…4.8
• CVE-2026-34248Zammad is a web based open source helpdesk/customer support …5.7
• CVE-2026-3425The RTMKit Addons for Elementor plugin for WordPress is vuln…8.8
• CVE-2026-34253A buffer underflow vulnerability has been identified in the …8.2
• CVE-2026-34256Due to a missing authorization check in SAP ERP and SAP S/4H…7.1
• CVE-2026-34257Due to an Open Redirect vulnerability in SAP NetWeaver Appli…6.1
• CVE-2026-34258SAPUI5 (Search UI) allows an unauthenticated attacker to man…4.7