Critical severity9.8NVD Advisory· Published Sep 1, 2026· Updated Sep 8, 2026
CVE-2026-84480
CVE-2026-84480
Description
WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to use expired tokens to reset account passwords indefinitely. Attackers who obtain a recovery token can use it at any time to change the target account's password and gain full account access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
2- WWBN AVideo: 25 Vulnerabilities Disclosed in Early September 2026 BatchVypr Intelligence · Sep 5, 2026
- WWBN AVideo: 16 Vulnerabilities Disclosed, Including Critical Auth and Password Reset FlawsVypr Intelligence · Sep 1, 2026