CVE-2026-33690: CVE-2026-33690: IP Address Spoofing via Unsafe Header Processing in WWBN AVideo

WWBN AVideo versions up to 26.0 are vulnerable to IP address spoofing (CVE-2026-33690, CVSS 5.3) due to blindly trusting user-controlled HTTP headers like X-Forwarded-For for client IP resolution. This allows attackers to bypass IP-based access controls. The issue is fixed in version 26.1 via commit 1a1df6a, which implements a conditional trust model based on private IP ranges.