CVE ID :CVE-2026-111330 Published : Oct. 15, 2026, 10:19 p.m. | 1 hour, 14 minutes ago Description :JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-111330 - JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1

VERWANDTEARTIKEL

CVE-2026-75941 - Lenovo Legion Zone Remote Code Execution Vulnerability

CVE-2026-111366 - cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints

CVE-2026-111352 - ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API

CVE-2026-111356 - MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

CVE-2026-111347 - go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

CVE-2026-111329 - JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console