Skip to content

CVE-2026-123095

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 6, 2026
Last Seen
November 6, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Risk Playlist Injection Vulnerability in mpv Player Disclosed63.0

A vulnerability, CVE-2026-123095, has been identified in mpv versions 0.29.0 to 0.42.0, allowing remote attackers to exploit playlist injection via the ytdl_hook script. This flaw enables attackers to bypass safety checks and execute local files or shared objects, potentially leading to unauthorized...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details