{"id":"CVE-2026-126544","published":"2026-11-11T01:17:15.903","lastModified":"2026-11-11T01:17:16.070","description":"WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode() in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrary users_id and recoverPass set to true to verify other accounts' emails, unlocking features such as live streaming.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwes":["CWE-1024"],"vendors":[],"products":[],"references":[{"url":"https://github.com/WWBN/AVideo/blob/v29.7.1/objects/user.php#L3293-L3307","tags":[]},{"url":"https://github.com/WWBN/AVideo/commit/115116813611f2cbabfee3f5d9b49ce6f25ae959","tags":[]},{"url":"https://github.com/WWBN/AVideo/security/advisories/GHSA-f72w-prhp-h385","tags":[]},{"url":"https://www.vulncheck.com/advisories/wwbn-avideo-6.5-through-29.7.1-email-verification-bypass-via-user-verifycode","tags":[]}],"exploitRefs":[{"url":"https://github.com/WWBN/AVideo/blob/v29.7.1/objects/user.php#L3293-L3307","tags":[]},{"url":"https://github.com/WWBN/AVideo/commit/115116813611f2cbabfee3f5d9b49ce6f25ae959","tags":[]},{"url":"https://github.com/WWBN/AVideo/security/advisories/GHSA-f72w-prhp-h385","tags":[]}],"hasPoc":true,"ai":null}