CVE-2026-92578: WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash
WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a valid login credential through two independent code paths in loginFromRequest() and encryptPasswordVerify(). Attackers who obtain the stored users.password hash value can authenticate as any user by submitting the hash directly to login endpoints, completely bypassing password verification.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker must obtain a value from the users.password field. They can then submit that stored password hash directly to login endpoints to authenticate as the corresponding user without knowing the plaintext password.
Is this exploitable without an existing account or user interaction?
The listed vector indicates no privileges and no user interaction are required. However, exploitation depends on first obtaining a stored password hash.
What access can an attacker gain after successful exploitation?
The attacker can authenticate as the user associated with the obtained hash. The reported impact includes high confidentiality, integrity, and availability impact.
Which versions are affected?
WWBN AVideo through version 29.0 is affected. The provided information does not identify a fixed version.