JuggleIM vulnerabilities
CVEs whose affected-version data names the JuggleIM package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111329Critical· 9.8JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console
JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deleti…
▾ Midnightjuggleim · JuggleIMvia CVEORG
CVE-2026-111330Medium· 5.9JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1
JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go. Attackers who obtain the accounts table through …
▾ Sunlitjuggleim · JuggleIMvia CVEORG