CVE-2026-41058 | WWBN AVideo up to 29.0 CloneSite unlink deleteDump path traversal (GHSA-5879-4fmr-xwf2)

A vulnerability categorized as critical has been discovered in WWBN AVideo up to 29.0. This issue affects the function unlink of the component CloneSite. Such manipulation of the argument deleteDump leads to path traversal.

This vulnerability is traded as CVE-2026-41058. The attack may be launched remotely. There is no exploit available.

It is advisable to implement a patch to correct this issue.