Vulnerabilities

TI-2026-25471 CVE-2026-33025

AVideo-Encoder is Vulnerable to Authenticated SQL Injection via ORDER BY Clause

MEDIUM 45

AVideo is a video-sharing Platform.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00414 Published 2026-03-20 Fixed in 8.0 CWE-89

TI-2026-25470 CVE-2026-33024

MEDIUM 48

AVideo is a video-sharing Platform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00456 Published 2026-03-20 Fixed in 8.0 CWE-918

TI-2026-23203 CVE-2026-29058 · GHSA-9j26-99jh-v26q

MEDIUM 60

AVideo is a video-sharing Platform software.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0894 Published 2026-03-06 Fixed in 7.0, 7.0.0 CWE-78