CVE-2026-1196
Low · 3.1CVSS
3.1
EPSS
0.5%
Published
Jan 20, 2026
CISA due date
—
The record
A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | mineadmin/mineadmin | 1.0.0 | No fix |
Related vulnerabilities
- CVE-2026-1195 A weakness has been identified in MineAdmin 1.x/2.x. Also affects mineadmin/mineadmin
- CVE-2026-1194 A security flaw has been discovered in MineAdmin 1.x/2.x. Also affects mineadmin/mineadmin
- CVE-2026-1193 A vulnerability was identified in MineAdmin 1.x/2.x. Also affects mineadmin/mineadmin
- CVE-2025-65854 MineAdmin has an insecure default password Also affects mineadmin/mineadmin
- CVE-2026-114657 Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows… CWE-200
- CVE-2026-114574 A security vulnerability has been detected in massCodeIO massCode 5.10. CWE-200
- CVE-2026-111756 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows… CWE-200
- CVE-2026-111755 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows… CWE-200