CVE-2026-33719 | WWBN AVideo up to 26.0 CDN Plugin Endpoint status.json.php par missing authentication

A vulnerability identified as critical has been detected in WWBN AVideo up to 26.0. Affected is an unknown function of the file plugin/CDN/status.json.php of the component CDN Plugin Endpoint. The manipulation of the argument par leads to missing authentication.

This vulnerability is documented as CVE-2026-33719. The attack can be initiated remotely. There is not any exploit available.

To fix this issue, it is recommended to deploy a patch.