Skip to content
OpenAdvisories

Vendor

cool-team-official

2 known vulnerabilities.

Products

cool-admin-midway 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-111366

    cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints

    cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user:* permissions can call /admin/sys/user/i…

    cool-team-official cool-admin-midway