Threats affecting pkg:github/songloft-org/songloft

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-119662Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to High8.72026-10-30GCVE DatabaseCVE-2026-119662 Songloft versions from 2.9.0 up to but not including 2.13.6 contain a hardcoded credentials vulnerability. This flaw allows attackers on the same network segment to authenticate as an administrator using a fixed username and password (admin/admin). Exploiting this vulnerability enables unauthorized modification of library and configuration settings and installation of JavaScript plugins executed in QuickJS. Report on CVE-2026-119662 Vulnerability CWE-798 #ghsa-642p-47qh-4hhp	GCVE Database	2026-10-30

Page 1 of 1