CVE-2026-1193
Medium · 6.3CVSS
6.3
EPSS
0.3%
Published
Jan 19, 2026
CISA due date
—
The record
A vulnerability was identified in MineAdmin 1.x/2.x. The impacted element is an unknown function of the file /system/cache/view of the component View Interface. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | mineadmin/mineadmin | 1.0.0 | No fix |
Related vulnerabilities
- CVE-2026-1195 A weakness has been identified in MineAdmin 1.x/2.x. Also affects mineadmin/mineadmin
- CVE-2026-1196 A security vulnerability has been detected in MineAdmin 1.x/2.x. Also affects mineadmin/mineadmin
- CVE-2026-1194 A security flaw has been discovered in MineAdmin 1.x/2.x. Also affects mineadmin/mineadmin
- CVE-2025-65854 MineAdmin has an insecure default password Also affects mineadmin/mineadmin
- CVE-2026-63349 AnyIO is a high level asynchronous concurrency and networking framework that works on top… CWE-266
- CVE-2026-62106 Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions. CWE-266
- CVE-2026-62102 Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions. CWE-266
- CVE-2026-8303 Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies… CWE-266