PT-2026-35223 · Mirofish · Mirofish

Yu_Bao · CVE-2026-7041 · Published 2026-04-26 · Updated 2026-04-26

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions 666ghj MiroFish versions prior to 0.1.3

Description An issue exists in the Werkzeug Debugger PIN Handler component within the '/console' file. A remote attacker can cause information disclosure by manipulating the SECRET argument. This attack is characterized by high complexity and is difficult to execute.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

CVE-2026-7041

Affected Products

Mirofish

References · 9

• 🔥 https://github.com/666ghj/MiroFish/issues/483 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7041.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-7041 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-7041 · Security Note
• https://vuldb.com/vuln/359620 · Note
• https://vuldb.com/vuln/359620/cti · Note
• https://github.com/666ghj/MiroFish · Note
• https://twitter.com/CVEnew/status/2048481023277531489 · Twitter Post
• https://vuldb.com/submit/798526 · Note