PT-2026-61044 · Newpanjing · Simpleui

Galaxyn · CVE-2026-16210 · Published 2026-07-19 · Updated 2026-07-19

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self.get action of the file simpleui/admin.py of the component AjaxAdmin AJAX Endpoint. Performing a manipulation results in missing authentication. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Improper Authentication

Missing Authentication

Weakness Enumeration

CWE-287

CWE-306

Related Identifiers

CVE-2026-16210

Affected Products

Simpleui

References · 7

• 🔥 https://github.com/newpanjing/simpleui/issues/537 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-16210 · Security Note
• https://github.com/newpanjing/simpleui · Note
• https://vuldb.com/vuln/380026/cti · Note
• https://vuldb.com/submit/857929 · Note
• https://vuldb.com/vuln/380026 · Note
• https://vuldb.com/cve/CVE-2026-16210 · Note