CyberSecBulletin

M1k1o vulnerabilities

We track 2 vulnerabilities in M1k1o products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 21, 2026.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest M1k1o vulnerabilities

  • 8.8 High severity

    Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0…

    CVE-2026-39386M1k1o

    Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immediately obtain full administrative control of the entire Neko instance (member management, room

  • 8.8 High severity

    blog: Unchecked Return Value

    CVE-2022-23626M1k1oEPSS 9.87%

    m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Although PHP issued warnings and the upload function returned `false`, the original file (that could contain