Is CVE-2026-58001 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-58001?

CVE-2026-58001 has a CVSS v3 severity of MEDIUM (5.7).

Back

CVE-2026-58001

Description

WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET requests. Attackers can store an img tag in a video description that transfers video ownership to an attacker-controlled account when an administrator views the video page.