CVE-2026-1196: MineAdmin May Expose Sensitive Information to an Unauthorized Actor

low Affects mineadmin/mineadmin. Feed 2026.10.29.1, updated 2026-10-28; published 2026-01-20; advisory modified 2026-09-10.

MineAdmin May Expose Sensitive Information to an Unauthorized Actor

Package: mineadmin/mineadmin Composer
Affected versions: >=1.0.0 and <=2.0.3
Fixed in: no fix recorded
Severity: low CVSS 3.1
Exploitation: not on CISA KEV · EPSS 0% (41.0th percentile)
Published: 2026-01-20
Source: osv.dev

References

CWE-200

NVD record mineadmin/mineadmin advisories

Am I affected?

Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden deps composer.lock

Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command

Install docs How findings are ranked

Related advisories

CVE-2026-55224 high MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninst same package: mineadmin/mineadmin
CVE-2026-1194 medium MineAdmin May Expose Sensitive Information to an Unauthorized Actor same package: mineadmin/mineadmin
CVE-2025-65854 critical MineAdmin has an insecure default password same package: mineadmin/mineadmin
CVE-2026-1193 medium MineAdmin has Incorrect Privilege Assignment same package: mineadmin/mineadmin
CVE-2026-1195 medium MineAdmin improperly refreshes tokens same package: mineadmin/mineadmin
CVE-2017-5487 medium wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implemen same weakness: CWE-200