CVE-2022-28927: Subconverter Project Subconverter

Critical severity, CVSS 9.8. EPSS: 34.4% chance of exploitation in the next 30 days.

A remote code execution (RCE) vulnerability in Subconverter v0.7.2 allows attackers to execute arbitrary code via crafted config and url parameters.

Affected products

• Subconverter Project Subconverter: version 0.7.2 only

Published 2022-05-19. Last modified 2026-06-17.