Live › vulnerability › CVE-2026-118578
Go to dashboardMusicFreeDesktop versions 0.0.6 through 0.0.8 have a flaw in an unspecified Request Forwarder function that discloses information. The sources say an exploit is public, but the project had not responded to an early report.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 23:35 UTC. All times on this page are UTC.
Installations of MusicFreeDesktop 0.0.6, 0.0.7 or 0.0.8 are in scope, and the attack needs a position on the local network. The sources do not describe which data is disclosed or which configuration is required. Teams that do not run this desktop music player can skip it.
No product ranges from the sources yet.
0.0.6, 0.0.7 and 0.0.80.0.8 once the maintainer publishes one, or stop running the desktop app on shared networksEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipulation results in information disclosure. The attack can only be performed from the local network. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-118578")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.