Skip to content
Threat Feed
Subscribe

Product

AdminNeo (>= 4.6.0, < 5.5.1)

1 brief RSS
high advisory

AdminNeo: Cookie attribute injection via X-Forwarded-Prefix (CVE-2026-96631)

AdminNeo versions 4.6.0 through 5.5.0 contain a vulnerability where unsanitized X-Forwarded-Prefix headers allow cookie attribute injection, potentially leading to session hijacking and credential theft.

AdminNeo web-vulnerability cve cookie-injection
2t 1c