CVE-2026-1194
Medium · 5.3CVSS
5.3
EPSS
0.8%
Published
Jan 20, 2026
CISA due date
—
The record
A security flaw has been discovered in MineAdmin 1.x/2.x. This affects an unknown function of the component Swagger. The manipulation results in information disclosure. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | mineadmin/mineadmin | 1.0.0 | No fix |
Related vulnerabilities
- CVE-2026-1195 A weakness has been identified in MineAdmin 1.x/2.x. Also affects mineadmin/mineadmin
- CVE-2026-1196 A security vulnerability has been detected in MineAdmin 1.x/2.x. Also affects mineadmin/mineadmin
- CVE-2026-1193 A vulnerability was identified in MineAdmin 1.x/2.x. Also affects mineadmin/mineadmin
- CVE-2025-65854 MineAdmin has an insecure default password Also affects mineadmin/mineadmin
- CVE-2026-114657 Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows… CWE-200
- CVE-2026-114574 A security vulnerability has been detected in massCodeIO massCode 5.10. CWE-200
- CVE-2026-111756 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows… CWE-200
- CVE-2026-111755 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows… CWE-200