What is CVE-2026-33684?

CVE-2026-33684 is a medium-severity vulnerability in Wwbn Avideo, classified under Missing Authorization. CVSS score: 5.3/10. Published 2026-07-15.

How severe is CVE-2026-33684?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Wwbn Avideo

CVE-2026-33684

WWBN AVideo is an open source video platform. Prior to version 29.0, Privilege Escalation is possible through unguarded permission parameters in signUp API, which allows any user who can solve a CAPTCHA to self-grant elevated permissions d…

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Wwbn Avideo — versions < 29.0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2026-33684?: CVE-2026-33684 is a medium-severity vulnerability in Wwbn Avideo, classified under Missing Authorization. CVSS score: 5.3/10. Published 2026-07-15.
How severe is CVE-2026-33684?: Medium severity. CVSS v3 base score is 5.3 out of 10.