Product by MusicPlayerDaemon
MusicPlayerDaemon MPD
4 known vulnerabilities in MusicPlayerDaemon MPD (MusicPlayerDaemon), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2026-49127 | Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be | 8.6 | |
| High | CVE-2026-49128 | Music Player Daemon < 0.24.11 Path Traversal via LocalStorage URI Handling | 7.5 | |
| Medium | CVE-2026-49129 | Music Player Daemon < 0.24.11 SSRF via CurlInputPlugin | 5.8 | |
| Medium | CVE-2026-49130 | Music Player Daemon < 0.24.11 CRLF Injection via XspfPlaylistPlugin.cxx | 5.3 |