Jellyfin is a technology platform tracked by ThreatCluster, appearing in 1 threat cluster built from 3 intelligence report mentions.
Jellyfin is a technology platform tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed June 22, 2026; most recent activity June 24, 2026.
A critical vulnerability in FFmpeg's MagicYUV decoder, tracked as CVE-2026-8461, allows attackers to exploit heap out-of-bounds writes to crash systems or execute remote code. Discovered by JFrog, the flaw affects a…
Jellyfin is a technology platform tracked by ThreatCluster, appearing in 1 threat cluster built from 3 intelligence report mentions.
The most recent intelligence report mentioning Jellyfin on ThreatCluster is dated June 24, 2026. Activity was first observed June 22, 2026, giving a tracked span from then to June 24, 2026.
Across ThreatCluster reporting, Jellyfin most frequently co-occurs with APT20/Cozy Bear, DDoS, Supply Chain Attack, Zero-day Exploit, JFrog, among 12 tracked related entities.
The most significant recent cluster is “Critical FFmpeg Vulnerability Enables Remote Code Execution via Malicious Media Files” (9 articles · Updated June 23, 2026). Jellyfin appears across 1 threat cluster in total, listed above with sources.
Jellyfin appears in 3 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.