WWBN AVideo — CVE-2026-85154 (Critical)

Date Sep 3, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product WWBN · AVideo

CVE CVE-2026-85154

Critical vendor advisory CVE-2026-85154

Summary

WWBN AVideo contains an authentication failure vulnerability where the video_id_hash credential is a non-expiring, non-revocable bearer token that grants full administrator session access to the video owner's account. Attackers who obtain a video_id_hash can replay it indefinitely to authenticate as the video owner with full privileges, and the credential remains valid even after the owner changes their password.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.8) in WWBN AVideo. Patch or mitigate promptly.

Operator check

Review CVE-2026-85154 in your asset inventory. Apply patches per vendor guidance and verify AVideo is not exposed. CVSS score: 9.8.

Sources

NVD — CVE-2026-85154 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed