CVE-2026-118577

MEDIUM 6.3

maotoumao MusicFreeDesktop Request Forwarder server-side request forgery

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the component Request Forwarder. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The identifier of the patch is b0d3876247a0a64fa0e430e4b21870e41f503182. It is recommended to apply a patch to fix this issue.

CWE	CWE-918
Vendor	maotoumao
Product	musicfreedesktop
Published	Oct 28, 2026

Stay Ahead of the Next One

Get instant alerts for maotoumao musicfreedesktop

Be the first to know when new medium vulnerabilities affecting maotoumao musicfreedesktop are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

maotoumao / MusicFreeDesktop

0.0.6 0.0.7 0.0.8

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/428016 vuldb.com: https://vuldb.com/vuln/428016/cti vuldb.com: https://vuldb.com/cve/CVE-2026-118577 vuldb.com: https://vuldb.com/submit/1025070 github.com: https://github.com/maotoumao/MusicFreeDesktop/issues/443 github.com: https://github.com/maotoumao/MusicFreeDesktop/commit/b0d3876247a0a64fa0e430e4b21870e41f503182 github.com: https://github.com/maotoumao/MusicFreeDesktop/

Credits

🔍 wilson888 (VulDB User)