The CVE record for CVE-2026-111330 was published on 2026-10-15T21:43:33.735Z and has not been modified since then. The NVD entry is currently 8.2 HIGH. JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests. Attackers who obtain the accounts table through database access or backups can crack console passwords using pre [truncated]
CVE-2026-111329 JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console. The CVE record was published on 2026-10-15T21:43:33.035Z and has not been modified since then. This vulnerability allows unauthenticated remote attackers to access the admin console on port 8090 using default administrator credentials (admin/123456). System administrators and security teams should verify and reme [truncated]
