Unrated severityNVD Advisory· Published Aug 10, 2026
CVE-2026-19075
CVE-2026-19075
Description
All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by ?vdl=<post_id> on any aiovg_videos post (public/video.php, AIOVG_Public_Video::download_video()), which reads the post's mp4 meta value and streams that URL's response back to the requester.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.