MusicPlayerDaemon

Products

ProductCVEsExploitedLatest
MPD4–May 28, 2026

Exploited and recent CVEs

  • CVE-2026-49130 Medium 5.3 Music Player Daemon < 0.24.11 CRLF Injection via XspfPlaylistPlugin.cxx 0.3%
  • CVE-2026-49129 Medium 5.8 Music Player Daemon < 0.24.11 SSRF via CurlInputPlugin 0.3%
  • CVE-2026-49128 High 7.5 Music Player Daemon < 0.24.11 Path Traversal via LocalStorage URI Handling 0.6%
  • CVE-2026-49127 High 8.6 Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be 0.5%