CVE-2026-44482

creationtimestamp| type| source ---|---|--- 2026-05-14 18:05:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltfscwtns2o...

CVE-2026-44482 soundcloud-rpc: Remote Code Execution via XSS in Track Title

soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support. Prior to 0.1.8, a track title containing an HTML payload executed locally in the Electron app. This means attacker-controlled SoundCloud track metadata can lead to local command execution on...