CVE-2026-55224 Scanner
CVE-2026-55224 Scanner - Path Traversal vulnerability in MineAdmin
Used 2.9k times · 4.3k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-55224
8.7
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates unsanitized user-supplied identifier values directly into file system paths. An attacker can use path traversal sequences (e.g., ../) to read, install, or uninstall plugins from arbitrary directories, and potentially execute arbitrary composer commands. This issue has been patched in version 3.2.0-alpha.2.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
mineadmin
Updated Oct 2, 2026View on NVD →
S4E scanner
CVE history: mineadmin
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →