Skip to content
OpenAdvisories

Vendor

songloft-org

1 known vulnerabilities.

Products

songloft 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-119662

    Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend

    Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to authenticate as administrator using the fixed admin/admin pair. Attackers on the same network can log in via the /api/v1/auth/login endpoint …

    songloft-org songloft