songloft vulnerabilities

CVEs whose affected-version data names the songloft package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119662High· 8.8PoC

1w ago

Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend

Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to authenticate as administrator using the fixed admin/admin pair. Attackers on the same network can log in via the /api/v…

▾ Midnightsongloft-org · songloftEPSS 0.43%via CVEORG