Beveiligingsadvies

CVE-2026-89251

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-11 11:15:29

Laatst bijgewerkt 2026-09-11 18:22:41

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/AD_Server/log.php, allowing logged-in users to submit arbitrary label values that trigger unverified wallet credits to campaign video owners. Attackers can repeatedly POST label=start requests to mint YPTWallet balance for any campaign video without proof an ad actually played.

← Alle CVE's bekijken Bekijk op cve.org ↗