{"id":"CVE-2026-112104","published":"2026-10-19T11:17:16.967","lastModified":"2026-10-19T15:16:45.150","description":"A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched remotely. Upgrading to version 1.8.34-beta is sufficient to resolve this issue. This patch is called ccba99b66bc61acf46e4a332034799d7452ddea6. Upgrading the affected component is advised.","cvssScore":7.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwes":["CWE-287","CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://github.com/eremef/bandcamp-player/","tags":[]},{"url":"https://github.com/eremef/bandcamp-player/commit/ccba99b66bc61acf46e4a332034799d7452ddea6","tags":[]},{"url":"https://github.com/eremef/bandcamp-player/issues/104","tags":[]},{"url":"https://github.com/eremef/bandcamp-player/pull/119","tags":[]},{"url":"https://github.com/eremef/bandcamp-player/releases/tag/v1.8.34-beta","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-112104","tags":[]},{"url":"https://vuldb.com/submit/1013134","tags":[]},{"url":"https://vuldb.com/vuln/422045","tags":[]},{"url":"https://vuldb.com/vuln/422045/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/eremef/bandcamp-player/","tags":[]},{"url":"https://github.com/eremef/bandcamp-player/commit/ccba99b66bc61acf46e4a332034799d7452ddea6","tags":[]},{"url":"https://github.com/eremef/bandcamp-player/issues/104","tags":[]},{"url":"https://github.com/eremef/bandcamp-player/pull/119","tags":[]},{"url":"https://github.com/eremef/bandcamp-player/releases/tag/v1.8.34-beta","tags":[]}],"hasPoc":true,"ai":null}