CVE-2026-82643 — WWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.php
WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Att…
Published: 2026-08-30 · CVSS: 6.9 · CVSS 4.0
WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attackers can submit correct credentials repeatedly to trigger uncapped two-factor confirmation emails and perform sustained password guessing attacks against user accounts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7