1024-lab smart-admin vulnerabilities

Latest 1024-lab smart-admin CVEs

Newest publication first

1. CVE-2026-108923 1024-lab smart-admin Support Config Query queryByKey access control

   Published 2026-10-12

   Medium·CVSS 5.3 EPSS 0.21%

   A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey can lead to improper ac...

2. CVE-2026-7468 1024-lab smart-admin Demo Site index.html access control

   Published 2026-04-30

   Medium·CVSS 6.9 EPSS 0.36%

   A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. Th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.