Go-admin - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2026-09-16.

Products

• Go-admin - 2 CVEs
• Go-cms - 1 CVEs

Newest CVEs of Go-admin

• CVE-2026-92793 - CVSS 8.6 (high), 2026-09-16: GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated users to bypass permission checks by…
• CVE-2024-57095 - CVSS 6.8 (medium), 2025-01-24: SQL injection vulnerability in Go-CMS v.1.1.10 allows a remote attacker to execute arbitrary code via a crafted payload.
• CVE-2022-42980 - CVSS 9.8 (critical), 2022-10-17: go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key.