Read the docs

juggleim

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

juggleim records in CISA KEV

No juggleim vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-75073 CVE-2026-111329

JuggleIM im-server Default Admin Credentials in Admin Console

Priority HIGH 81

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00688 Published 2026-10-15 No fix listed CWE-1392
TI-2026-75074 CVE-2026-111330

Weak password hashing in JuggleIM im-server admin console

Priority LOW 35

JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00222 Published 2026-10-15 No fix listed CWE-916
Open these records in search →