Lucene search
+L

2 matches found

osv-cve
osv-cve
•added 2026/02/22 12:02 a.m.•30 views

CVE-2026-2898 funadmin Backend Endpoint AuthCloudService.php getMember deserialization

A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloudaccount results in deserialization. The attack may be performed from...

5.1CVSS5.7AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/22 12:00 a.m.•8 views

CVE-2026-2898: Deserialization of Untrusted Data

A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloudaccount results in deserialization. The attack may be performed from...

6.5CVSS5.5AI score0.0046EPSS
SaveExploits1References1
Rows per page
Query Builder