Read the docs

m1k1o

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

m1k1o records in CISA KEV

No m1k1o vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Neko 1 record MEDIUM

Records

3 records

TI-2022-07679 CVE-2022-23626

Insufficient file checks in m1k1o/blog

Priority HIGH 73

m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.09874 Published 2022-02-08 Fixed in 1.4 CWE-20
TI-2026-28371 CVE-2026-39386 · GHSA-2gw9-c2r2-f5qf

Neko has Self-service Privilege Escalation for Authenticated Users

Priority MEDIUM 40

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immediately obtain full administrative control of the entir…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00437 Published 2026-04-21 Fixed in 3.0.11, 3.1.2 +1 CWE-20
TI-2026-81487 CVE-2026-116679 · GHSA-5cp7-fp4j-wwcv

Authorization bypass in Neko legacy WebRTC input handling

Priority LOW 24

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00311 Published 2026-10-27 Fixed in 3.1.5, 0.0.0-20260805142851-395ca1a6f62b CWE-863
Open these records in search →