CVE-2026-1197

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-1197

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-1197.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-1197

Published

2026-01-20T00:32:08Z

Modified

2026-11-14T10:45:22Z

Severity

1.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

MineAdmin downloadById information disclosure

Details

A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-200",
        "CWE-284"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/1xxx/CVE-2026-1197.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.*"
                        },
                        {
                            "last_affected": "1.*"
                        },
                        {
                            "introduced": "2.*"
                        },
                        {
                            "last_affected": "2.*"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandaloneSingleVersion"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/mineadmin/mineadmin

Affected ranges

Type

GIT

Repo

https://github.com/mineadmin/mineadmin

Events

Introduced

945eb37866dd16edeef9d4fb3e75c14bdc4930f3

Last Affected

945eb37866dd16edeef9d4fb3e75c14bdc4930f3

Database specific

Show details

{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:mineadmin:mineadmin:1.0:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0"
                },
                {
                    "last_affected": "1.0"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

1.*

1.0

v1.*

v1.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-1197.json"