THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-82647 (MEDIUM 6.1) — WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administrators to send mail from the site's contact address by bypassing origin checks and captcha validation. Attackers can craft a malicious web page that, when visit

[NVD] CVE-2026-82647 (MEDIUM 6.1) — WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administrators to send mail from the site's contact address by bypassing origin checks and captcha validation. Attackers can craft a malicious web page that, when visit

mednvdPublished 2026-08-30

CVE-2026-82647 CVSS: 6.1 MEDIUM Published: 2026-08-30T15:16:45.160

WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administrators to send mail from the site's contact address by bypassing origin checks and captcha validation. Attackers can craft a malicious web page that, when visited by an authenticated admin, sends emails with atta

MITRE ATT&CK techniques

ImpersonationT1684.001
ImpersonationAML.T0073

Indicators of compromise

CVE-2026-82647cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82647