TI-2026-50862 CVE-2026-72605 · GHSA-j8m4-xpvr-6gcwSwing Music Swing Music - Missing AuthenticationPriority MEDIUM 40A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint.CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00536 · Published 2026-08-11 · No fix listed CWE-306