Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Onekeyadmin

First CVE: Mar 6, 2023Active for: 3 yearsTotal CVEs: 10

Onekeyadmin is a narrowly scoped administrative platform with a concentrated vulnerability footprint centered on its core product. The vendor's disclosures skew toward serious severity outcomes and recur through application-layer weakness classes including cross-site scripting, improper file and directory access controls, missing authorization checks, and unrestricted file uploads—patterns typical of web-facing administrative interfaces where input handling and access boundaries matter critically to security. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.

FAUCET AI Generated
10
Total CVEs
More Total CVEs than 90% of tracked vendors
10.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 99% of tracked vendors
6.6
Avg CVSS Score
Higher Avg CVSS Score than 48% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Onekeyadmin over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 6, 2023
3 years ago
Most Recent CVE
Mar 16, 2023
1,226 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (10 CVEs).

10 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-26957CRITICAL
onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.
Mar 9, 20239.128NONO
CVE-2023-26948HIGH
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.
Mar 9, 20237.524NONO
CVE-2023-26949CRITICAL
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.
Mar 6, 20239.824NONO
CVE-2023-26956HIGH
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.
Mar 8, 20237.523NONO
CVE-2023-26952MEDIUM
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.
Mar 8, 20235.420NONO
CVE-2023-26950MEDIUM
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module.
Mar 8, 20235.419NONO
CVE-2023-26954MEDIUM
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module.
Mar 7, 20235.419NONO
CVE-2023-26953MEDIUM
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.
Mar 7, 20234.818NONO
CVE-2023-26951MEDIUM
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.
Mar 16, 20235.415NONO
CVE-2023-26955MEDIUM
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module.
Mar 7, 20235.415NONO
View all 10 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products10 CVEs
60%
20%
20%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network10 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (40.0%)
Unknown0 (0.0%)
Required6 (60.0%)
Privileges Required
Low5 (50.0%)
High1 (10.0%)
None4 (40.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (10 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Onekeyadmin.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Onekeyadmin — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Onekeyadmin's Products

View all 1 CNAs →

Top CWEs