CVE-2024-58286CWE-78command-injection

CVE-2024-58286

published December 12, 2025

CVSS
9.3
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings. Attackers can modify the executable path with shell commands to read system files like /etc/passwd by exploiting improper input validation.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.01371 · 71.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-12-12T03:15Z
References (3)
https://github.com/vexorian/dizquetv · [email protected]https://www.exploit-db.com/exploits/52079 · [email protected]https://www.vulncheck.com/advisories/dizquetv-remote-code-execution-via-ffmpeg-executable-path · [email protected]
EPSS history
Timeline
  • 11 DEC 21:32Z
    dizqueTV 1.5.3 Remote Code Execution via FFMPEG Executable Path
    cvelistv5