CVE-2026-107675 in FFmpeg
Riassunto
di MITRE • 08/10/2026
FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output.
If you want to get best quality of vulnerability data, you may have to visit VulDB.