CVE Intelligence

Swing Music vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Swing Music products: 1 record(s), with severity, exploitation and fixes.

Swing Music 1

Exploited only (KEV) →

CVE-2026-72605 High · 7.5 CWE-306 Aug 11, 2026
Swing Music Swing Music - Missing Authentication
A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint. The endpoint is allowlisted from JWT verification, permitting unauthenticated account creation. An attacker can register an account and use it to access protected functionality on the server.