Skip to content
OpenAdvisories

Vendor

NetEase

3 known vulnerabilities.

Products

NetEase Cloud Music for Windows 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-109424

    NetEase Cloud Music Weak Encryption via eapi/xeapi

    NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are decrypted using a fixed, publicly documented AES-128-ECB key with no integrity …

    NetEase NetEase Cloud Music for Windows Windows