Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: m1k1o Clear all filters
TI-2026-81487 CVE-2026-116679 · GHSA-5cp7-fp4j-wwcv

Authorization bypass in Neko legacy WebRTC input handling

Priority LOW 24

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00311 Published 2026-10-27 Fixed in 3.1.5, 0.0.0-20260805142851-395ca1a6f62b CWE-863
TI-2026-28371 CVE-2026-39386 · GHSA-2gw9-c2r2-f5qf

Neko has Self-service Privilege Escalation for Authenticated Users

Priority MEDIUM 40

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immediately obtain full administrative control of the entir…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00437 Published 2026-04-21 Fixed in 3.0.11, 3.1.2 +1 CWE-20
TI-2022-07679 CVE-2022-23626

Insufficient file checks in m1k1o/blog

Priority HIGH 73

m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.09874 Published 2022-02-08 Fixed in 1.4 CWE-20