CVE-2026-112104
HIGH
CVSS 7.3
Published: 2026-10-19
Modified: 2026-10-19
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched remotely. Upgrading to version 1.8.34-beta is sufficient to resolve this issue. This patch is called ccba99b66bc61acf46e4a332034799d7452ddea6. Upgrading the affected component is advised.
Quick Facts
| CVE ID | CVE-2026-112104 |
| CVSS Score | 7.3 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| Published | 2026-10-19 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |
References
- https://github.com/eremef/bandcamp-player/
- https://github.com/eremef/bandcamp-player/commit/ccba99b66bc…
- https://github.com/eremef/bandcamp-player/issues/104
- https://github.com/eremef/bandcamp-player/pull/119
- https://github.com/eremef/bandcamp-player/releases/tag/v1.8.…
- https://vuldb.com/cve/CVE-2026-112104
- https://vuldb.com/submit/1013134
- https://vuldb.com/vuln/422045
- https://vuldb.com/vuln/422045/cti