CVE-2026-33502 | WWBN AVideo up to 26.0 HTTP Request plugin/Live/test.php server-side request forgery (GHSA-3fpm-8rjr-v5mc)

A vulnerability, which was classified as critical, was found in WWBN AVideo up to 26.0. Affected by this vulnerability is an unknown functionality of the file plugin/Live/test.php of the component HTTP Request Handler. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-33502. It is possible to launch the attack remotely. No exploit is available.

It is best practice to apply a patch to resolve this issue.