Read the docs

songloft-org

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

songloft-org records in CISA KEV

No songloft-org vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-83136 CVE-2026-119662 · GHSA-642p-47qh-4hhp

Hardcoded admin credentials in Songloft embedded backend

Priority HIGH 73

Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to authenticate as administrator using the fixed admin/admin pair.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00431 Published 2026-10-30 Fixed in 2.13.6 CWE-798
Open these records in search →