AV
Product
AVideo
5
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add AVideo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-56345 | 8.1 | Jun 20 | AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint Affected: through 29.0 |
| CVE-2026-56341 | 7.5 | Jun 20 | AVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.php Affected: through 26.0 |
| CVE-2026-56342 | 6.8 | Jun 20 | AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter Affected: through 27.0 |
| CVE-2026-56346 | 6.5 | Jun 20 | AVideo - Unauthenticated PGP Message Decryption via decryptMessage.json.php Endpoint Affected: through 25.0 |
| CVE-2026-60092 | 6.1 | Jul 8 | AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel Affected: All versions, or not specified |
Showing 5
