CVE-2026-33479 | WWBN AVideo up to 26.0 Session Cookie saveSort.json.php eval sections code injection

A vulnerability categorized as critical has been discovered in WWBN AVideo up to 26.0. Affected by this vulnerability is the function eval of the file saveSort.json.php of the component Session Cookie Handler. Executing a manipulation of the argument sections can lead to code injection.

This vulnerability appears as CVE-2026-33479. The attack may be performed from remote. There is no available exploit.

Applying a patch is advised to resolve this issue.