PT-2026-35223 · Mirofish · Mirofish

Yu_Bao · Published 2026-04-26 · Updated 2026-04-26 · CVE-2026-7041

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions 666ghj MiroFish versions prior to 0.1.3

Description An issue exists in the Werkzeug Debugger PIN Handler component within the '/console' file. A remote attacker can cause information disclosure by manipulating the SECRET argument. This attack is characterized by high complexity and is difficult to execute.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Improper Access Control

Weakness Enumeration

CWE-200

CWE-284

Related Identifiers

CVE-2026-7041

Affected Products

Mirofish

References · 7

• 🔥 https://github.com/666ghj/MiroFish/issues/483 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7041 · Security Note
• https://vuldb.com/vuln/359620 · Note
• https://vuldb.com/submit/798526 · Note
• https://github.com/666ghj/MiroFish · Note
• https://vuldb.com/vuln/359620/cti · Note
• https://twitter.com/CVEnew/status/2048481023277531489 · Twitter Post