Skip to content
Threat Feed
Subscribe

Product

AdminNeo (< 5.5.1)

1 brief RSS
high advisory

AdminNeo: Cookie attribute injection via X-Forwarded-Prefix (CVE-2026-96631)

AdminNeo versions 4.6.0 through 5.5.0 contain a vulnerability where unsanitized X-Forwarded-Prefix headers allow cookie attribute injection, potentially leading to session hijacking and credential theft.

AdminNeo +1 web-vulnerability cve cookie-injection
2t 2c updated