What’s Vulnerable › Vulnerabilities

CVE-2024-58286: dizqueTV 1.5.3 Remote Code Execution via FFMPEG Executable Path

• Severity: critical (CVSS 9.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-11 · updated 2026-10-02
• Weakness: CWE-78

Description

dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings. Attackers can modify the executable path with shell commands to read system files like /etc/passwd by exploiting improper input validation.

Affected products

• vexorian dizqueTV: 1.5.3

References

• https://github.com/vexorian/dizquetv
• https://www.exploit-db.com/exploits/52079
• https://www.vulncheck.com/advisories/dizquetv-remote-code-execution-via-ffmpeg-executable-path

Get alerted when CVE-2024-58286 or the next vulnerability affects your stack