High severity8.1NVD Advisory· Published Sep 16, 2026· Updated Sep 22, 2026
CVE-2026-92578
CVE-2026-92578
Description
WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a valid login credential through two independent code paths in loginFromRequest() and encryptPasswordVerify(). Attackers who obtain the stored users.password hash value can authenticate as any user by submitting the hash directly to login endpoints, completely bypassing password verification.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
1- WWBN AVideo: Twelve Vulnerabilities Disclosed, Including Auth Bypass and SSRFVypr Intelligence · Sep 16, 2026