CVE-2026-102247

MEDIUM 6.8

FastAdmin Database Management database.php unnecessary privileges

CVSS Score

6.8

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit is now public and may be used.

CWE	CWE-250
Vendor	n/a
Product	fastadmin
Published	Sep 29, 2026

Stay Ahead of the Next One

Get instant alerts for n/a fastadmin

Be the first to know when new medium vulnerabilities affecting n/a fastadmin are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

n/a / FastAdmin

1.6.1.20250430 1.6.5.20260602

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/411145 vuldb.com: https://vuldb.com/vuln/411145/cti vuldb.com: https://vuldb.com/cve/CVE-2026-102247 vuldb.com: https://vuldb.com/submit/933377 github.com: https://github.com/baguette168/CVE/issues/2

Credits

🔍 baguette168 (VulDB User)