CVE-2026-34738 - Vulnerability Analysis

Overview

WWBN AVideo <= 26.0 contains a broken access control vulnerability caused by lack of permission checks on overrideStatus parameter in video processing pipeline, letting uploaders bypass moderation and publish videos directly, exploit requires upload permissions.

Severity & Score

Impact

Uploaders can bypass moderation and publish videos directly, undermining content review and control processes.

Mitigation

Update to the latest version once a patch is available.

References

• https://github.com/WWBN/AVideo/security/advisories/GHSA-m577-w9j8-ch7j

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner