MEDIUM 6.9 NVD
CVE-2026-84481
WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configura
WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthenticated visitors. Attackers can send an unauthenticated GET request to plugin/MobileManager/getConfiguration.json.php to obtain TLS private key file paths, socket configuration details, platform version, and debug flags enabling further targeted attacks.
References
- https://github.com/WWBN/AVideo/security/advisories/GHSA-5jfh-mcm7-299m
- https://www.vulncheck.com/advisories/wwbn-avideo-through-30.0-information-disclosure-via-m
This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-09-01 via NVD.
vulnfeed aggregates 11552 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.