VYPR
\n```\n\nThe browser executes `alert(origin)` with full CSP bypass because the script tag carries a valid nonce.\n\n### 3. Trigger it via Login CSRF\n\nThe login form has no CSRF token. An attacker page auto-submits the login, forcing the victim's browser to connect to the rogue server:\n\n```html\n
\n \n \n \n \n
\n\n```\n\n## Collaborator Request\n\nThis vulnerability was discovered jointly with Yashar Shahinzadeh (GitHub: @Voorivex). Could you please add him as a collaborator on this advisory and credit him as a co-discoverer? Thank you!","additionalType":"https://schema.org/SoftwareApplication","sameAs":["https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96632"]},"keywords":"CVE-2026-96632, high","mentions":[],"isAccessibleForFree":true},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://portal.vyprsec.ai/"},{"@type":"ListItem","position":2,"name":"CVEs","item":"https://portal.vyprsec.ai/cves"},{"@type":"ListItem","position":3,"name":"CVE-2026-96632","item":"https://portal.vyprsec.ai/cves/CVE-2026-96632"}]}]}
← All advisories
High severity8.2NVD Advisory· Published Oct 30, 2026

AdminNeo Vulnerable to XSS via Rogue MySQL Server Version String (CSP Nonce Bypass)

CVE-2026-96632

Description

Summary

AdminNeo inserts the database server's version string into a ` The browser executes alert(origin) with full CSP bypass because the script tag carries a valid nonce. ### 3. Trigger it via Login CSRF The login form has no CSRF token. An attacker page auto-submits the login, forcing the victim's browser to connect to the rogue server: ``html


## Collaborator

Request

This vulnerability was discovered jointly with Yashar Shahinzadeh (GitHub: @Voorivex). Could you please add him as a collaborator on this advisory and credit him as a co-discoverer? Thank you!

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.