Skip to content
OpenAdvisories

Vendor

cool-team-official

2 known vulnerabilities.

Products

cool-admin-midway 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.0
    CVE-2026-111365

    cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpoints

    cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sy…

    cool-team-official cool-admin-midway