PT-2026-110902

Name of the Vulnerable Software and Affected Versions NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 through 3.1.39.205426 Description The application uses a fixed, publicly documented AES-128-ECB key to decrypt response bodies from the '/eapi/' and '/xeapi/' API endpoints...