{"id":"CVE-2026-112104","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-112104","summary":"A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing…","details":"A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched remotely. Upgrading to version 1.8.34-beta is sufficient to resolve this issue. This patch is called ccba99b66bc61acf46e4a332034799d7452ddea6. Upgrading the affected component is advised.","published":"2026-10-19T11:17:16.967","modified":"2026-10-19T11:17:16.967","cvss":{"score":7.3,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/eremef/bandcamp-player/commit/ccba99b66bc61acf46e4a332034799d7452ddea6","label":"eremef/bandcamp-player@ccba99b"},"references":[{"type":"WEB","url":"https://github.com/eremef/bandcamp-player/"},{"type":"WEB","url":"https://github.com/eremef/bandcamp-player/commit/ccba99b66bc61acf46e4a332034799d7452ddea6"},{"type":"WEB","url":"https://github.com/eremef/bandcamp-player/issues/104"},{"type":"WEB","url":"https://github.com/eremef/bandcamp-player/pull/119"},{"type":"WEB","url":"https://github.com/eremef/bandcamp-player/releases/tag/v1.8.34-beta"},{"type":"WEB","url":"https://vuldb.com/cve/CVE-2026-112104"},{"type":"WEB","url":"https://vuldb.com/submit/1013134"},{"type":"WEB","url":"https://vuldb.com/vuln/422045"},{"type":"WEB","url":"https://vuldb.com/vuln/422045/cti"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-10-19T11:17:16.967"}}