Authentication Bypass Vulnerability in AVideo by WWBN

CVE-2026-86722

What is CVE-2026-86722?

AVideo, a media platform developed by WWBN, has revealed an authentication bypass vulnerability due to improper handling of SQL cache invalidation. This flaw arises when sqlDAL caches empty result sets, allowing attackers with valid credentials to bypass two-factor authentication on new devices. The stale cache does not generate the necessary confirmation code hash, enabling unauthorized access to user accounts. This poses a significant risk, emphasizing the need for immediate attention and patching to safeguard user data.

References