Medium 6.3

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an...

CVE-2026-118577 First seen on SecPulse 07:15

Affected packages

Ecosystem	Package	Affected	Fixed
maotoumao	MusicFreeDesktop	—	—

Original description The description as published by the source.

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the component Request Forwarder. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The identifier of the patch is b0d3876247a0a64fa0e430e4b21870e41f503182. It is recommended to apply a patch to fix this issue.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.3; CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4: Low 2.1; CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Published: Oct 29, 2026
First seen on SecPulse: 07:15
GHSA: GHSA-3rmm-vg5v-m89f
CWE: CWE-918

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-918

All

Maotoumao Musicfreedesktop

Detection sources

NIST National Vulnerability Database08:17
GitHub Security Advisories (Global)09:31
CVE.org (CVE Program・cvelistV5)07:15