MPD
MusicPlayerDaemon · 4 CVEs
CVE-2026-49130
MEDIUM
Music Player Daemon < 0.24.11 CRLF Injection via XspfPlaylistPlugin.cxx
May 28, 2026
CVE-2026-49129
MEDIUM
Music Player Daemon < 0.24.11 SSRF via CurlInputPlugin
May 28, 2026
CVE-2026-49128
HIGH
Music Player Daemon < 0.24.11 Path Traversal via LocalStorage URI Handling
May 28, 2026
CVE-2026-49127
HIGH
Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be
May 28, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-49130 | Music Player Daemon < 0.24.11 CRLF Injection via XspfPlaylistPlugin.cxx | MEDIUM | 0.44% | May 28, 2026 |
| CVE-2026-49129 | Music Player Daemon < 0.24.11 SSRF via CurlInputPlugin | MEDIUM | 0.48% | May 28, 2026 |
| CVE-2026-49128 | Music Player Daemon < 0.24.11 Path Traversal via LocalStorage URI Handling | HIGH | 0.63% | May 28, 2026 |
| CVE-2026-49127 | Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be | HIGH | 0.68% | May 28, 2026 |
Showing 1 to 4 of 4 CVEs