2 matches found
CVE-2026-35033
Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain an unauthenticated arbitrary file read vulnerability via ffmpeg argument injection through the StreamOptions query parameter parsing mechanism. The ParseStreamOptions method in StreamingHelpers.cs adds any...
9.3CVSS5.5AI score0.00522EPSS
SaveExploits0References1
CVE-2026-35033: Improper Neutralization of Argument Delimiters in a Command
Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain an unauthenticated arbitrary file read vulnerability via ffmpeg argument injection through the StreamOptions query parameter parsing mechanism. The ParseStreamOptions method in StreamingHelpers.cs adds any...
9.3CVSS5.9AI score0.00522EPSS
SaveExploits0References4
20