Lucene search
+L

9 matches found

NVD
NVD
•added 2026/10/12 8:17 p.m.•13 views

CVE-2026-108923

A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey can lead to improper access controls. Th...

6.5CVSS0.0035EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/12 7:15 p.m.•23 views

CVE-2026-108923 1024-lab smart-admin Support Config Query queryByKey access control

A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey can lead to improper access controls. Th...

5.3CVSS5.2AI score
SaveExploits0References8
CVE
CVE
•added 2026/10/12 7:15 p.m.•15 views

CVE-2026-108923

The 1024-lab smart-admin software (up to version 3.30.0 ) contains an improper access control vulnerability in the Support Config Query component. Specifically, a manipulation of the configKey argument within the /support/config/queryByKey file allows for unauthorized actions. This vulnerability ...

6.5CVSS6AI score0.0035EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/12 7:15 p.m.•14 views

EUVD-2026-97783

A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey can lead to improper access controls. Th...

6.5CVSS6.1AI score0.0035EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/12 7:15 p.m.•43 views

CVE-2026-108923 1024-lab smart-admin Support Config Query queryByKey access control

A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey can lead to improper access controls. Th...

6.5CVSS0.0035EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•11 views

PT-2026-110896

Name of the Vulnerable Software and Affected Versions 1024-lab smart-admin versions prior to 3.30.0 Description An issue exists in the Support Config Query component within the '/support/config/queryByKey' endpoint. Remote manipulation of the configKey argument can lead to improper access control...

6.5CVSS6.4AI score0.0035EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•9 views

CVE-2026-108923: Improper Access Control

A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey can lead to improper access controls. Th...

6.5CVSS6.1AI score0.0035EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/30 12:00 a.m.•6 views

CVE-2026-7468: Improper Access Control

A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...

7.5CVSS6.6AI score0.00472EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/30 12:00 a.m.•42 views

PT-2026-36032

A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...

7.5CVSS6.5AI score0.00472EPSS
SaveExploits0References6
Rows per page
Query Builder