CVE-2022-50691: Minidvblinux

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

MiniDVBLinux 5.4 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands as root through the 'command' GET parameter. Attackers can exploit the /tpl/commands.sh endpoint by sending malicious command values to gain root-level system access.

Affected products

• Minidvblinux Minidvblinux: version 5.4 only

Published 2025-12-30. Last modified 2026-06-17.