FV Flowplayer Video Player (<= 8.3.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/fv-flowplayer-video-player--8.3.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 17:37:08 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgFV Flowplayer Video Player: PHP Object Injection (CVE-2026-118079)https://feed.craftedsignal.io/briefs/2026-10-fv-flowplayer-rce-223be8f0/Thu, 29 Oct 2026 17:37:08 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-fv-flowplayer-rce-223be8f0/FV Flowplayer Video Player versions 8.3.4 and earlier are affected by a PHP Object Injection vulnerability.CVE-2026-118079 identifies a PHP Object Injection vulnerability in the FV Flowplayer Video Player plugin, affecting versions 8.3.4 and earlier.

Impact

Successful exploitation of PHP Object Injection vulnerabilities can lead to significant security risks, including potential data corruption or unauthorized code execution depending on the application environment.

]]>highadvisory