CyberSecBulletin

ContiNew Admin vulnerabilities

We track 2 vulnerabilities in ContiNew Admin products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 8, 2026.

2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score

Latest ContiNew Admin vulnerabilities

  • 7.2 High severity

    ContiNew Admin: Server-Side Request Forgery

    CVE-2026-3750ContiNew Admin

    A security vulnerability has been detected in ContiNew Admin up to 4.2.0. This issue affects the function URI.create of the file continew-system/src/main/java/top/continew/admin/system/factory/S3ClientFactory.java of the component Storage Management Module. Th

  • 8.1 High severity

    ContiNew Admin: Unverified Password Change

    CVE-2025-4552ContiNew Admin

    A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack