CVE-2026-16210

Name of the Vulnerable Software and Affected Versions newpanjing simpleui version 2026.01.13

Description An issue exists in the AjaxAdmin AJAX Endpoint within the self.get action() function of the simpleui/admin.py file. A manipulation of this component can lead to missing authentication, allowing for remote exploitation.

Recommendations As a temporary workaround, restrict access to the self.get action() function in the simpleui/admin.py file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.