CVE-2026-19075: All-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' Parameter
All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by ?vdl=<postid> on any aiovgvideos post (public/video.php, AIOVGPublicVideo::downloadvideo()), which reads the post's mp4 meta value and streams that URL's response back to the requester.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19075?
CVE-2026-19075 has a risk score of 71, indicating a high-severity vulnerability.
How does CVE-2026-19075 affect All-in-One Video Gallery?
CVE-2026-19075 affects All-in-One Video Gallery by allowing a Server-Side Request Forgery (SSRF) through the 'vdl' parameter.
How can I fix CVE-2026-19075?
To fix CVE-2026-19075, update All-in-One Video Gallery to version 4.9.2 or later, which addresses the SSRF vulnerability.
Is CVE-2026-19075 exploitable without authentication?
Yes, CVE-2026-19075 can be exploited without authentication, making it particularly concerning for public-facing applications.
What is the impact of a successful exploit of CVE-2026-19075?
A successful exploit of CVE-2026-19075 could allow an attacker to access internal URLs and potentially sensitive information within the network.