CVE-2026-118629

{
  "etk_id": "ETK-2026-3149",
  "cve_id": "CVE-2026-118629",
  "display_id": "CVE-2026-118629",
  "ghsa_id": "GHSA-59cf-vpf5-j3cx",
  "euvd_id": "EUVD-2026-114587",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Publication-status authorization flaw in All-in-One Video Gallery",
  "summary": "All-in-One Video Gallery versions earlier than 5.0.0 can disclose titles and source URLs for videos that are not publicly published. An unauthenticated remote visitor may access this metadata when they can target an affected video record.",
  "mitigation": "Upgrade All-in-One Video Gallery to version 5.0.0 or later. Until upgrading, restrict access to affected player pages and review non-public video metadata for unintended exposure.",
  "vendor": null,
  "product": "All-in-One Video Gallery",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 5.0.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "5.0.0"
      ],
      "package_name": "All-in-One Video Gallery",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 20.2140193,
  "t0_at": "2026-10-31T06:00:23.071000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-31T06:00:23.071000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-31T06:00:23.071000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-118629"
    }
  }
}