Vendor
Cool Team Official
Products
2
CVEs
3
Across products
3
Status
Private
Products
2- 2 CVEs
- 1 CVE
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-111366 | Hig | 0.47 | 7.2 | 0.01 | Oct 15, 2026 | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user:* permissions can call /admin/sys/user/info, update, or… | ||
| CVE-2026-111365 | Med | 0.39 | 6.0 | 0.00 | Oct 15, 2026 | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update,… | ||
| CVE-2026-52348 | Cri | 0.00 | 9.8 | 0.00 | Jul 17, 2026 | cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java. |
- risk 0.47cvss 7.2epss 0.01
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user:* permissions can call /admin/sys/user/info, update, or…
- risk 0.39cvss 6.0epss 0.00
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update,…
- risk 0.00cvss 9.8epss 0.00
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.