{"uuid": "5f318bfb-7afc-4e26-baee-2f71fcc7dd27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3moxfixt6jw2l", "content": "A video file your server opens by itself can run an attacker's commands.\n\nPixelSmash (CVE-2026-8461) hits anything built on FFmpeg: Jellyfin, Nextcloud, your own upload pipelines.\n\nUpdate FFmpeg to 8.1.2, then watch for media tools spawning a shell.", "creation_timestamp": "2026-06-23T12:26:22.513077Z"}