Zero Radar
← feed
MediumVulnerabilityCVE-2026-96634updated 30 Oct 2026, 22:54 UTC

AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE

Fixed in adminneo-org/adminneo 5.5.1 · out Official source
SeverityMediumCVSS 6.9 of 10
Being exploited?UnclearNo reports either way yet
Fix available?Yesadminneo-org/adminneo 5.5.1 · since 30 Oct 2026
How sure is this?Official sourceBacked by an official source

Are you affected?

Package / productAffected versionsFixed in
adminneo-org/adminneo · composer< 5.5.15.5.1

Timeline

  1. 30 Oct 2026, 22:53 UTC
    Publicly disclosed
  2. 30 Oct 2026, 22:53 UTC
    Reported by GitHub Advisory · GitHub Advisory
  3. 30 Oct 2026, 22:54 UTC
    Picked up by Zero Radar

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
CVE-2026-96634 · GHSA-p96f-p2p2-2g3h
CVSS
6.9 / 10
Disclosed
30 Oct 2026, 22:53 UTC
On Zero Radar
30 Oct 2026, 22:54 UTC (1 min after disclosure)
Last change
30 Oct 2026, 22:54 UTC

This entry has not been explained yet. The text comes straight from the source. How Zero Radar works

AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE · Zero Radar