What’s Vulnerable › Vulnerabilities

CVE-2026-51564

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-27 · updated 2026-07-28
• Weakness: CWE-601

Description

An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request.

References

• https://github.com/1337Skid/CVE-2026-51564
• https://github.com/giuliopanda/milk-admin/
• https://github.com/giuliopanda/milk-admin/blob/6389386de2a9226c84ecb7e79cd16d7c027952ad/milkadmin/App/Route.php
• https://github.com/giuliopanda/milk-admin/blob/6389386de2a9226c84ecb7e79cd16d7c027952ad/public_html/index.php

Get alerted when CVE-2026-51564 or the next vulnerability affects your stack