CVE-2026-89246Proof of concept (PoC) published · CISA
WWBN AVideo CSV Formula Injection via myComments.download.php
CVSS score
5.1
EPSS probability
%0.2
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-92580
AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF
W
Patch status unknownEPSS %1
6.9
CVE-2026-72748
AVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.php
W
Patch verifiedEPSS %1
9.3
CVE-2026-86189
WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php
W
Patch status unknownEPSS %1
9.2
CVE-2026-92578
WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash
W
Patch status unknownEPSS %1
8.7
CVE-2026-59808
AVideo Authentication Bypass via Unkeyed Video Hash Disclosure
W
Patch status unknownEPSS %1
9.3
CVE-2026-84479
WWBN AVideo Authentication Bypass via User-Agent Header
W
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-89246"