cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpoints

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-111365 · Microsoft / collected KEV context

cve-program · CVE-2026-111365

• https://hackmd.io/@hieuPenguinnn/cool-admin-midway-base-crud-role-ownership-idor
• https://github.com/cool-team-official/cool-admin-midway/blob/e545ef6f3b0c08581e34bd3207ca57d851ccc3ae/src/modules/base/controller/admin/sys/role.ts#L11-L36
• https://github.com/cool-team-official/cool-admin-midway/blob/e545ef6f3b0c08581e34bd3207ca57d851ccc3ae/src/modules/base/service/sys/role.ts#L54-L118
• https://github.com/cool-team-official/cool-admin-midway
• https://www.vulncheck.com/advisories/cool-admin-midway-through-8.0.0-missing-authorization-via-system-role-endpoints

No related operational record is retained in the current change model.