CVE-2026-119662 | songloft-org Songloft up to 2.13.5 /api/v1/auth/login hard-coded credentials

October 30, 2026 Yanac

A vulnerability has been found in songloft-org Songloft up to 2.13.5 and classified as critical. This affects an unknown part of the file /api/v1/auth/login. This manipulation causes hard-coded credentials.

This vulnerability is registered as CVE-2026-119662. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More