[CVE-2026-8461]

June 26, 2026

• CVE-2026-8461 ("PixelSmash") — a heap OOB write in FFmpeg's MagicYUV decoder yields RCE via a crafted media file; a public exploit dropped. JFrog, PoC · Vulnerabilities & Exploits

in Malware Weaponizes Prompt Injection to Sabotage AI Analysis as Gamaredon Retools Against Ukraine

June 25, 2026

• FFmpeg "PixelSmash" (CVE-2026-8461) in the libavcodec MagicYUV decoder enables RCE via crafted media files, putting video players, media servers, and NAS appliances at risk; fixed in FFmpeg 8.1.2. SecurityWeek, JFrog · Vulnerabilities & Exploits

in Cisco SD-WAN Manager Zero-Day Gives Root via a Malicious CSV as Operation Endgame Smashes Amadey and StealC