build-admin vulnerabilities

Products

• build-admin/buildadmin 1

Latest build-admin CVEs

Newest publication first

1. CVE-2026-111648 BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter

   Published 2026-10-16

   Medium·CVSS 5.1

   BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickna...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.