VYPR
Vendor

AdminNeo

Products
1
CVEs
1
Across products
0
Status
Private

Products

1

Recent CVEs

1
  • CVE-2026-59978higOct 30, 2026
    risk 0.45cvss —epss —

    ### Summary AdminNeo v5.4.1 gets the latest version from GitHub API in a browser JavaScript function. Version number is then sent by POST request to `?script=version`. This endpoint lacks origin validation and accepts POST data from any source. An attacker can POST `version[]`…