CVE-2026-61569

{
  "etk_id": "ETK-2026-2923",
  "cve_id": "CVE-2026-61569",
  "display_id": "CVE-2026-61569",
  "ghsa_id": "GHSA-2rrq-xf8q-3qpf",
  "euvd_id": "EUVD-2026-112553",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated SQL injection in AVideo-Encoder streamer login",
  "summary": "AVideo-Encoder versions before 8.1.0 expose a SQL injection flaw in the streamer login endpoint. An unauthenticated remote attacker may read encoder database data when the endpoint is reachable, the streamer allowlist accepts the supplied site URL, and the encoder can contact an attacker-controlled login service.",
  "mitigation": "Upgrade AVideo-Encoder to version 8.1.0 or later. Populate and restrict the streamer allowlist to trusted URLs, and limit network access to the encoder while upgrading.",
  "vendor": "composer",
  "product": "composer:WWBN/AVideo-Encoder",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 8.0"
      ],
      "ecosystem": "composer",
      "fixed_versions": [],
      "package_name": "WWBN/AVideo-Encoder",
      "purl": "pkg:composer/WWBN/AVideo-Encoder"
    }
  ],
  "cwes": [
    89
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 20.5745596,
  "t0_at": "2026-10-28T21:54:38.358000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-06-22T15:39:49+00:00",
      "days": -128.26029349537038,
      "is_lower_bound": false,
      "measured_at": "2026-10-28T21:54:38.358000+00:00",
      "url": "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-2rrq-xf8q-3qpf"
    },
    "trigger_signal": {
      "at": "2026-10-28T21:54:38.358000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-28T21:54:38.358000+00:00",
      "url": "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-2rrq-xf8q-3qpf"
    }
  }
}