CVE-2026-30120Critical· 9.8▾ MidnightRemotion: remote code execution (RCE) vulnerability
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via GHSA
Last analysed / modified upstream
0.8%
0.8% → 0.9%
remotion-dev remotion v4.0.409 was discovered to contain a remote code execution (RCE) vulnerability.
remotion < 4.0.410Upgrade to a patched release:
remotion 4.0.410Connected by shared product, vendor, weakness, or advisory.
CVE-2026-30121Critical· 9.1Remotion: arbitrary file write vulnerability
CVE-2025-11905Medium· 6.3A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2
CVE-2025-14730Medium· 4.7A security flaw has been discovered in CTCMS Content Management System up to 2.1.2
CVE-2025-14729Medium· 4.7A vulnerability was identified in CTCMS Content Management System up to 2.1.2
CVE-2025-10097Medium· 6.3A vulnerability was identified in SimStudioAI sim up to 1.0.0
CVE-2025-13786High· 7.3A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665