CVE-2026-84478

Name of the Vulnerable Software and Affected Versions WWBN AVideo (affected versions not specified)

Description A path traversal issue exists in the 'get api login code' API endpoint. Unauthenticated attackers can delete arbitrary .log files by providing directory traversal sequences in the code parameter. This allows for the destruction of audit logs and the ability to probe for file existence on the server, resulting in both file deletion and information disclosure regarding the filesystem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the code parameter in the 'get api login code' API endpoint until the issue is resolved.