simple-admin-core vulnerabilities

CVEs whose affected-version data names the simple-admin-core package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111690Critical· 9.8

yesterday

Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass

Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in api/etc/core.yaml. Attackers can sign …

▾ Midnightsuyuan32 · simple-admin-corevia CVEORG