juggleim has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.9 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.9
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Weakness classes
Products
- JuggleIM 2
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-111329Critical· 9.8JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 809066CVE-2026-111330Medium· 5.9JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go32
juggleim vulnerabilities
CVEs affecting juggleim, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-111329Critical· 9.8PoCJuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090
JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deleti…
▾ Abyssaljuggleim · JuggleIMEPSS 0.69%via NVD
CVE-2026-111330Medium· 5.9JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go
JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go. Attackers who obtain the accounts table through …
▾ Sunlitjuggleim · JuggleIMEPSS 0.22%via NVD