Directory Traversal Vulnerability in WWBN AVideo Platform

CVE-2026-41062

What is CVE-2026-41062?

The WWBN AVideo platform is susceptible to a directory traversal vulnerability in versions up to 29.0. This flaw arises from a security check that only verifies the URL path component for '..' sequences, allowing attackers to exploit the query string to bypass this verification. By embedding malicious traversal sequences in the URL, an attacker could access arbitrary files on the server, posing significant security risks. The issue has been addressed in a subsequent update that improves the directory traversal protection measures.

References