CVE-2026-34364 — WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `categories.json.php` endpoint, which serves the category listing API, fails to enforce user group-based access — CVE Database · The Intelligence Room