CVE-2026-1196

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
Link Resource
https://github.com/SourByte05/MineAdmin-Vulnerability/issues/3 Exploit Issue Tracking Mitigation Third Party Advisory
https://vuldb.com/?ctiid.341781 Permissions Required VDB Entry
https://vuldb.com/?id.341781 Third Party Advisory VDB Entry
https://vuldb.com/?submit.734273 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mineadmin:mineadmin:1.0:*:*:*:*:*:*:*
cpe:2.3:a:mineadmin:mineadmin:2.0:*:*:*:*:*:*:*

History

05 Feb 2026, 20:19

Type Values Removed Values Added
References () https://github.com/SourByte05/MineAdmin-Vulnerability/issues/3 - () https://github.com/SourByte05/MineAdmin-Vulnerability/issues/3 - Exploit, Issue Tracking, Mitigation, Third Party Advisory
References () https://vuldb.com/?ctiid.341781 - () https://vuldb.com/?ctiid.341781 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.341781 - () https://vuldb.com/?id.341781 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.734273 - () https://vuldb.com/?submit.734273 - Third Party Advisory, VDB Entry
First Time Mineadmin
Mineadmin mineadmin
CPE cpe:2.3:a:mineadmin:mineadmin:1.0:*:*:*:*:*:*:*
cpe:2.3:a:mineadmin:mineadmin:2.0:*:*:*:*:*:*:*

20 Jan 2026, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2026-01-20 01:15

Updated : 2026-02-05 20:19


NVD link : CVE-2026-1196

Mitre link : CVE-2026-1196

CVE.ORG link : CVE-2026-1196


JSON object : View

Products Affected

mineadmin

  • mineadmin
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-284

Improper Access Control