A vulnerability described as critical has been identified in Cockpit HQ Cockpit CMS up to 2.14.0. The impacted element is the function
Process::fromShellCommandline of the component FFmpeg Integration. Such manipulation leads to command injection.
This vulnerability is uniquely identified as CVE-2026-73680. The attack can be launched remotely. No exploit exists.
