Is CVE-2026-83595 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-83595?

CVE-2026-83595 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-83595

Description

AVideo contains a cross-site request forgery vulnerability in plugin/API/set.json.php that allows attackers to perform state-changing actions by crafting GET requests that bypass CSRF protection. Attackers can navigate a victim's browser to a malicious URL with API parameters to delete videos, deactivate accounts, or modify playlists without user interaction.