Known Vulnerabilities for Admin by Silverstripe
Listed below are 1 of the newest known vulnerabilities associated with "Admin" by "Silverstripe".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58167 json | Nightingale (n9e) before 9.0.0-beta.2 exposes full datasource configurations, including plaintext database passwords, HTTP be... | Not Provided | 2026-06-30 | 2026-06-30 |
| CVE-2026-58165 json | OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-58054 json | MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when creating or editing users; t... | Not Provided | 2026-06-28 | 2026-06-29 |
| CVE-2026-57949 json | ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GE... | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-57945 json | PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users t... | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-57940 json | HTMLy 3.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the RSS feed import functionality. The function ge... | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-57659 json | Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions. | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-57520 json | Bitwarden Server before 2026.5.0 contains a privilege escalation vulnerability that allows authenticated Custom users with Ma... | Not Provided | 2026-06-25 | 2026-06-30 |
| CVE-2026-57518 json | Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users... | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-56780 json | Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/accounts/{pk}/password/ en... | Not Provided | 2026-06-29 | 2026-06-29 |