CVE-2026-102247

7.1 highEPSS 0.4%

High (7.1). EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit is now public and may be used.

Severity

CVSS 4.0

7.1 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-250
Published: 2026-09-29
Modified: 2026-09-29
Record from: the NVD, synced 2026-10-19

References

https://github.com/baguette168/CVE/issues/2
https://vuldb.com/cve/CVE-2026-102247
https://vuldb.com/submit/933377
https://vuldb.com/vuln/411145
https://vuldb.com/vuln/411145/cti

Check your stack JSON