CVE-2026-117568

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 28, 2026

Last Seen

October 28, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-117568: OS Command Injection in mcp-ffmpeg Affects Multiple Deployments61.5

CVE-2026-117568 was published on October 27, 2026, detailing an OS command injection vulnerability in mcp-ffmpeg versions up to 1.0.5. This flaw allows attackers to execute arbitrary shell commands by manipulating the videoPath or outputDir parameters in tools like resize-video and extract-audio. Th...