CVE-2026-110649 - Stills before 25.24.2 OS Command Injection via Media File Names
CVE ID :CVE-2026-110649 Published : Oct. 14, 2026, 3:17 p.m. | 15 minutes ago Description :Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths. Attackers can name a media file with $(...) or...