Authentication Bypass Vulnerability in AVideo by WWBN

CVE-2026-86723

What is CVE-2026-86723?

AVideo contains an authentication bypass vulnerability that affects its LoginControl component. The flaw arises from the use of a loose comparison operator, allowing attackers with only a password to submit empty requests to the verifyChallenge.json.php endpoint. This vulnerability can permit attackers to bypass PGP two-factor authentication mechanisms, thereby granting them unauthorized access to the system. Organizations using AVideo are advised to apply the latest updates to secure their applications against this exploitation vector.

References