CVE-2026-71620

A File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code by uploading a crafted .php file. The root cause is insufficient validation of uploaded file types in the file upload functionality, enabling code execution on the server. No specific pa...

CVE-2026-71622

CVE-2026-71622 is a SQL injection vulnerability in APiAdmin v.5.0.1 (Zhao-github), located in the User.php component. A remote attacker can exploit it to obtain sensitive information . No CVSS metrics, confirmed exploit, or vendor-published fix are provided in the available documents. The entry i...