WWBN AVideo — CVE-2026-86190 (Critical)

Date Sep 5, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product WWBN · AVideo

CVE CVE-2026-86190

Critical vendor advisory CVE-2026-86190

Summary

WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live session identifiers to unauthenticated callers when a hash parameter is provided. Attackers can use the disclosed session identifier to hijack viewer sessions, including administrator accounts, and obtain sensitive personal data for all video viewers.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.1) in WWBN AVideo. Patch or mitigate promptly. EPSS percentile: 19%.

Operator check

Review CVE-2026-86190 in your asset inventory. Apply patches per vendor guidance and verify AVideo is not exposed. CVSS score: 9.1. EPSS probability: 0.3%; percentile: 19%.

Sources

NVD — CVE-2026-86190 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed