CVE-2026-51946: n/a
SQL Injection vulnerability in GoAdminGroup GoAdmin (last release v1.2.26) allows a remote attacker to execute arbitrary code and obtain sensitive information via the the __sort_type URL parameter on all /admin/info/{table} endpoints
AI Analysis
Technical Summary
This vulnerability exists in GoAdminGroup GoAdmin (last release v1.2.26) where the __sort_type URL parameter in the /admin/info/{table} endpoints is not properly sanitized, enabling SQL Injection attacks. Exploitation can lead to arbitrary code execution and unauthorized disclosure of sensitive data.
Potential Impact
Successful exploitation can result in remote code execution and unauthorized access to sensitive information within the affected application. This poses a significant risk to the confidentiality and integrity of data managed by GoAdmin.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoints and validate or sanitize input parameters to mitigate exploitation risks.
CVE-2026-51946: n/a
Description
SQL Injection vulnerability in GoAdminGroup GoAdmin (last release v1.2.26) allows a remote attacker to execute arbitrary code and obtain sensitive information via the the __sort_type URL parameter on all /admin/info/{table} endpoints
CVSS v3.1
Score 6.5medium
Affected software
pkg:golang/github.com/goadmingroup/go-adminRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in GoAdminGroup GoAdmin (last release v1.2.26) where the __sort_type URL parameter in the /admin/info/{table} endpoints is not properly sanitized, enabling SQL Injection attacks. Exploitation can lead to arbitrary code execution and unauthorized disclosure of sensitive data.
Potential Impact
Successful exploitation can result in remote code execution and unauthorized access to sensitive information within the affected application. This poses a significant risk to the confidentiality and integrity of data managed by GoAdmin.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoints and validate or sanitize input parameters to mitigate exploitation risks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-06-08T00:00:00.000Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a4553d327e9c79719e35e73
Added to database: 07/01/2026, 17:52:19 UTC
Last enriched: 07/01/2026, 18:07:23 UTC
Last updated: 07/01/2026, 21:24:46 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.