CVE-2026-51564

23th percentile - higher than 23% of all known CVEs

An issue in the redirect parameter in Milk admin version 0.9.8 and earlier allows remote attackers to redirect users to arbitrary external URLs via a crafted request.

An attacker can exploit this vulnerability for phishing, redirecting users to malicious sites, potentially leading to credential theft or malware infection.

Update Milk admin to a version later than 0.9.8, which contains the fix for this vulnerability.