CVE-2026-56341
1 advisory.
Packagist/wwbn/avideo CVE-2026-56341: high 7.5, EPSS 0.46%
AVideo: Unauthenticated Access to Payment Log DataTables Endpoints Exposes Transaction Data, PayPal Tokens, and User Financial Records
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 26.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wprj-9cvc-5w37
- https://github.com/WWBN/AVideo/security/advisories/GHSA-wprj-9cvc-5w37
- https://nvd.nist.gov/vuln/detail/CVE-2026-56341
- https://github.com/WWBN/AVideo/commit/1729a955f8de7e26552eb728b3d1e6f4b1b9352e
- https://github.com/WWBN/AVideo
- https://github.com/advisories/GHSA-j724-5c6c-68g5
- https://www.vulncheck.com/advisories/avideo-unauthenticated-access-to-payment-log-datatables-endpoints-via-list-json-php
CVE-2026-56341 · published · modified · JSON