CVE-2026-1195
CVE-2026-1195 · MineAdmin JWT Token refresh data authenticity
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is said to be difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 2.3 · Low · EPSS 0.3%
- Published
- Updated
Stack: php
Affected products and versions
mineadmin
- Versions
- 1.*: Affected
- 2.*: Affected
No fix published
mineadmin/mineadmin Packagist
- Versions
- 2.0.0-alpha.1
- v1.0.0
- v1.1.0
- v1.1.1
- v1.2.0
- v1.2.1
- v1.3.0
- v1.3.3
- v1.4.1
- v1.4.11
- v1.4.12
- v1.4.13
- v2.0-RC.1
- v2.0.0-alpha.2
- v2.0.0-alpha.3
- v2.0.0-alpha.4
- v2.0.0-alpha.5
- v2.0.0-beta
- v2.0.0-beta.1
- v2.0.0-beta.2
- v2.0.0-beta.3
- v2.0.0-beta.4
- v2.0.0-beta.5
- v2.0.0-beta.6
- v2.0.1
- v2.0.1.1
- v2.0.2
- v2.0.3
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, ≤ 2.0.3
No fix published