CVE-2026-59978

AdminNeo , a PHP-based database management tool, is vulnerable to a Denial of Service (DoS) via an array injection in the ?script=version endpoint. In versions 4.6.2 through 5.5.0 , the application fails to validate the request origin, CSRF tokens, or parameter types. An unauthenticated attacker ...