{"vulnerability": "cve-2026-86190", "sightings": [{"uuid": "9d57761f-44ba-46a3-af44-934dd75cfdd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3murll2oedb2y", "content": "CVE-2026-86190\nThe AVideo platform\u2019s videoViewsInfo feature can be called without logging in and will return full user records, including password hashes, password\u2011reset tokens, and live\u2011session identifiers. This lets an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-05T13:30:06.103100Z"}, {"uuid": "0e76f1d3-c877-4fee-93af-54b23ddc1969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3murnonfhgc2n", "content": "\ud83d\udea8 CVE-2026-86190 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complet...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86190\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T14:07:53.856417Z"}, {"uuid": "75ce8e82-09cf-4561-be3c-ace4f486f84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murxdbp3xp2z", "content": "\ud83d\udd34 CVE-2026-86190 - Critical (9.1)\n\nWWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that retur...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86190/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T17:00:30.850270Z"}, {"uuid": "8b2b3fe2-5481-4495-b60e-00d1272f8f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muweq6f2k727", "content": "CVE-2026-86190 - Critical Broken Access Control in WWBN AVideo allows admin session hijacking & data theft. CVSS 9.1. Restrict endpoints now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-86190/", "creation_timestamp": "2026-09-07T11:11:00.521171Z"}, {"uuid": "2898a833-b03f-4ba3-b98a-1210a4d33876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117229450709376695", "content": "CVE-2026-86190 - Critical Broken Access Control in WWBN AVideo allows admin session hijacking & data theft. CVSS 9.1. Restrict endpoints now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-86190/", "creation_timestamp": "2026-09-07T11:11:10.197394Z"}]}