{"vulnerability": "cve-2026-92578", "sightings": [{"uuid": "11d6b433-7be2-4cdc-9348-200fa236bb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92578", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117283437631671586", "content": "CVE-2026-92578: CRITICAL auth bypass in WWBN AVideo (\u226429.0) allows attackers with stolen password hashes to log in as any user \u2014 no password needed. Patch pending \u2014 restrict hash access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq #CVE202692578 #authentication #infosec", "creation_timestamp": "2026-09-17T00:00:36.148183Z"}, {"uuid": "a52bcc25-73b1-4e8d-8032-1d41f8c80eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92578", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvodwnk63f2b", "content": "WWBN AVideo \u226429.0 hit by CRITICAL auth bypass (CVE-2026-92578): attackers with a password hash can access any account. Restrict hash access, monitor systems, and check vendor advisories. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq...", "creation_timestamp": "2026-09-17T00:00:39.325696Z"}, {"uuid": "f11742bd-8744-4797-a11d-cb8f24732246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoegpr4yb24", "content": "\ud83d\udea8 CVE-2026-92578 \u2014 CVSS 9.2 CRITICAL\n\nWWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92578\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T00:09:36.590509Z"}, {"uuid": "f2cfa758-7c8f-45c1-8360-1de2cc883e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92578", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoezgasdb2g", "content": "CVE-2026-92578 - avideo\nAVideo stores password hashes in a way that, if someone obtains those hashes, they can use them to sign in as any user without knowing the actual passwords. This means an attacker who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-17T00:20:04.395600Z"}]}