CVE-2026-92921

Name of the Vulnerable Software and Affected Versions admin3 versions 3.0.0 through 3.0.0

Description Account passwords are stored using a single-round MD5 hash with only the username as salt and no key derivation function (a method used to strengthen passwords by adding computational cost). This allows attackers with database access to recover plaintext passwords through offline dictionary or brute-force attacks due to the negligible computational effort required.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.