CyberSecBulletin

Swing Music vulnerabilities

We track 1 vulnerability in Swing Music products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Swing Music vulnerabilities

  • 7.5 High severity

    Swing Music: Missing Authentication for Critical Functionality

    CVE-2026-72605Swing Music

    A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint. The endpoint is allowlisted from JWT verification, permitting unauthenticated acco