A vulnerability classified as problematic has been found in WWBN AVideo up to 26.0. Affected by this vulnerability is the function InstagramUploader::publishMediaIfIsReady of the file publishInstagram.json.php of the component Endpoint. Performing a manipulation of the argument access token/container ID/Instagram account ID results in missing authorization. This vulnerability is identified as CVE-2026-35179. The attack can be initiated remotely.
| Vendor | Product | Versions |
|---|---|---|
| composer | wwbn/avideo | composer/wwbn/avideo: <= 26.0 |
Updated description with new technical details, changed severity to HIGH, and added CVE-2026-35179 as a new tag.
Initial creation
