What is GHSA-hcv2-33x5-mf26?

GHSA-hcv2-33x5-mf26 is a security advisory published by GitHub Security Advisories with Medium severity. WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager...

Which CVE IDs does GHSA-hcv2-33x5-mf26 cover?

GHSA-hcv2-33x5-mf26 covers the following CVE IDs: CVE-2026-84481. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-hcv2-33x5-mf26Medium

WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager...

Vendor

GitHub Security Advisories

Published

September 2, 2026

Last Modified

September 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-84481 →

📋 Description

WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthenticated visitors. Attackers can send an unauthenticated GET request to plugin/MobileManager/getConfiguration.json.php to obtain TLS private key file paths, socket configuration details, platform version, and debug flags enabling further targeted attacks.

🔗 References (4)

https://github.com/WWBN/AVideo/security/advisories/GHSA-5jfh-mcm7-299m
https://nvd.nist.gov/vuln/detail/CVE-2026-84481
https://www.vulncheck.com/advisories/wwbn-avideo-through-30.0-information-disclosure-via-mobilemanager
https://github.com/advisories/GHSA-hcv2-33x5-mf26