Originally published at: CVE-2026-18072: Backdoored ARVE plugin enables admin logins without credentials - ToolsLib Blog
CVE-2026-18072 affects Advanced Responsive Video Embedder (ARVE) 10.8.7, where a hardcoded backdoor can grant admin access without credentials. Check your version and remove 10.8.7 immediately if present.