Skip to content
OpenAdvisories

Vendor

Arthi-chaud

1 known vulnerabilities.

Products

Meelo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-122327

    Meelo through 3.13.1 Missing Authorization on Song, Track and Video Endpoints

    Meelo through 3.13.1 contains a missing authorization vulnerability that allows authenticated non-admin users to modify shared catalog data because RolesGuard does not require Admin on song, track and video write routes. Attackers can send PUT requests to /so…

    Arthi-chaud Meelo