CVE-2026-118577

MEDIUM Status: Received

CVSS Scores

CVSS v3.x Base Score
6.3
MEDIUM
CVSS v2 Base Score
7.5
HIGH

Description

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the component Request Forwarder. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The identifier of the patch is b0d3876247a0a64fa0e430e4b21870e41f503182. It is recommended to apply a patch to fix this issue.

Published
October 28, 2026 11:17 PM
Last Modified
October 28, 2026 11:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-918

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry