PT-2026-129221
CVE-2026-118577
·
Published
2026-10-28
·
Updated
2026-10-28
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
maotoumao MusicFreeDesktop versions 0.0.6 through 0.0.8
Description
A flaw in the Request Forwarder component allows remote attackers to perform server-side request forgery (SSRF), a technique where the attacker induces the server to make requests to an unintended location.
Recommendations
Apply patch b0d3876247a0a64fa0e430e4b21870e41f503182 for versions 0.0.6 through 0.0.8.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾