CVE-2026-40926 | WWBN AVideo up to 29.0 JSON Endpoint categoryAddNew.json.php canCreateCategory cross-site request forgery (GHSA-ffw8-fwxp-h64w)

A vulnerability was found in WWBN AVideo up to 29.0. It has been rated as problematic. This vulnerability affects the function Category::canCreateCategory of the file objects/categoryAddNew.json.php of the component JSON Endpoint. This manipulation causes cross-site request forgery.

This vulnerability appears as CVE-2026-40926. The attack may be initiated remotely. There is no available exploit.

To fix this issue, it is recommended to deploy a patch.