{"schema":"vulnpedia.research/1","cve":"CVE-2026-110649","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/shahkashani/stills/pull/29","tags":["patch","issue-tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","url":"https://github.com/shahkashani/stills/pull/29"},{"source":"nvd","sourceId":"CVE-2026-110649","modified":"2026-10-16T19:18:44.867","url":"https://github.com/shahkashani/stills/pull/29"}]},{"url":"https://github.com/shahkashani/stills/pull/30","tags":["patch","issue-tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","url":"https://github.com/shahkashani/stills/pull/30"},{"source":"nvd","sourceId":"CVE-2026-110649","modified":"2026-10-16T19:18:44.867","url":"https://github.com/shahkashani/stills/pull/30"}]},{"url":"https://github.com/shahkashani/stills/commit/5694b3b0dcd2da342f4f0497244129d4c9eb73bc","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","url":"https://github.com/shahkashani/stills/commit/5694b3b0dcd2da342f4f0497244129d4c9eb73bc"},{"source":"nvd","sourceId":"CVE-2026-110649","modified":"2026-10-16T19:18:44.867","url":"https://github.com/shahkashani/stills/commit/5694b3b0dcd2da342f4f0497244129d4c9eb73bc"}]},{"url":"https://github.com/shahkashani/stills/commit/51ba953983ba99915331607bf8530e6089952253","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","url":"https://github.com/shahkashani/stills/commit/51ba953983ba99915331607bf8530e6089952253"},{"source":"nvd","sourceId":"CVE-2026-110649","modified":"2026-10-16T19:18:44.867","url":"https://github.com/shahkashani/stills/commit/51ba953983ba99915331607bf8530e6089952253"}]},{"url":"https://github.com/shahkashani/stills/blob/66d5def1265b817d84524473a2813e4781dcbd80/lib/stills/frames.js#L106-L108","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","url":"https://github.com/shahkashani/stills/blob/66d5def1265b817d84524473a2813e4781dcbd80/lib/stills/frames.js#L106-L108"},{"source":"nvd","sourceId":"CVE-2026-110649","modified":"2026-10-16T19:18:44.867","url":"https://github.com/shahkashani/stills/blob/66d5def1265b817d84524473a2813e4781dcbd80/lib/stills/frames.js#L106-L108"}]},{"url":"https://github.com/shahkashani/stills/blob/66d5def1265b817d84524473a2813e4781dcbd80/lib/content/video.js#L58-L60","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","url":"https://github.com/shahkashani/stills/blob/66d5def1265b817d84524473a2813e4781dcbd80/lib/content/video.js#L58-L60"},{"source":"nvd","sourceId":"CVE-2026-110649","modified":"2026-10-16T19:18:44.867","url":"https://github.com/shahkashani/stills/blob/66d5def1265b817d84524473a2813e4781dcbd80/lib/content/video.js#L58-L60"}]},{"url":"https://www.vulncheck.com/advisories/stills-before-25.24.2-os-command-injection-via-media-file-names","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:16.991Z","url":"https://www.vulncheck.com/advisories/stills-before-25.24.2-os-command-injection-via-media-file-names"},{"source":"nvd","sourceId":"CVE-2026-110649","modified":"2026-10-16T19:18:44.867","url":"https://www.vulncheck.com/advisories/stills-before-25.24.2-os-command-injection-via-media-file-names"}]},{"source":"euvd","sourceId":"EUVD-2026-101277","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101277","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101277","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101277"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}