Incorrect Authorization Vulnerability in WWBN AVideo Product

CVE-2026-114633

What is CVE-2026-114633?

WWBN AVideo, prior to version 29.4.0, has a significant flaw involving incorrect authorization. This vulnerability enables users with delegated Admin accounts to manipulate administrator accounts by allowing unauthorized deletions or modifications. Attackers can exploit this issue by targeting specific endpoints such as confirmDeleteUser.json.php or userAddNew.json.php, which could lead to unauthorized actions like deleting critical files or altering admin privileges, thus compromising the integrity of the platform.

References