CVE-2026-107698 | FFmpeg up to 7.1.3/8.0.1 RTSP libavformat/rtsp.c ff_rtsp_connect server-side request forgery

October 8, 2026 Yanac

A vulnerability classified as critical has been found in FFmpeg up to 7.1.3/8.0.1. This affects the function ff_rtsp_connect of the file libavformat/rtsp.c of the component RTSP. The manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-107698. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More