Read the docs

cool-team-official

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

cool-team-official records in CISA KEV

No cool-team-official vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-75096 CVE-2026-111366

Authorization bypass in cool-admin-midway user management

Priority HIGH 72

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00532 Published 2026-10-15 No fix listed CWE-639
TI-2026-75095 CVE-2026-111365

Missing authorization in cool-admin-midway role endpoints

Priority MEDIUM 64

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids.

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00325 Published 2026-10-15 No fix listed CWE-639
Open these records in search →