Critical Zero-Day Vulnerability in AVideo Exposed

Critical Zero-Day Vulnerability in AVideo Exposed

First seen 8 Mar 2026, 04:09 UTC CyberpressCybersecuritynews 70.5

Article Content

Browse articles
ThreatCluster

A critical zero-click vulnerability, tracked as CVE-2026-29058, has been discovered in AVideo, an open-source video hosting platform. This flaw allows unauthenticated attackers to execute arbitrary operating system commands on affected servers, posing a significant risk to users of AVideo version 6.0. A patch has been released to mitigate this vulnerability.

Timeline

2026-03-06
CVE-2026-29058 published
2026-03-08
Vulnerability reported and patched