CVE-2026-102247CWE-250

CVE-2026-102247

Medium · published September 29, 2026

CVSS v3.1
6.8
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit is now public and may be used.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
8.5 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00393 · 32.3th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2026-09-29T08:17Z
References (5)
https://github.com/baguette168/CVE/issues/2 · [email protected]https://vuldb.com/cve/CVE-2026-102247 · [email protected]https://vuldb.com/submit/933377 · [email protected]https://vuldb.com/vuln/411145 · [email protected]https://vuldb.com/vuln/411145/cti · [email protected]
EPSS history
Timeline
  • 30 SEP 03:24Z
    EPSS moved — → 0%
    epss
  • 29 SEP 03:15Z
    FastAdmin Database Management database.php unnecessary privileges
    cvelistv5