CVE-2026-110117

SmartAdmin versions through 3.30.0 are affected by a missing authorization vulnerability within the AdminProtectController . This flaw allows authenticated low-privileged employees to access and modify system-wide level-3 protection settings. Specifically, attackers can invoke the unannotated upd...