Skip to content
OpenAdvisories

Vendor

1024-lab

6 known vulnerabilities.

Products

SmartAdmin 4 smart-admin 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-110117

    SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController

    SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated low-privileged employees to modify system-wide level-3 protection settings. Attackers can call the unannotated updateConfig and loginF…

    1024-lab SmartAdmin
  • Medium 6.3
    CVE-2026-108923

    1024-lab smart-admin Support Config Query queryByKey access control

    A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey ca…

    1024-lab smart-admin
  • Medium 6.3
    CVE-2026-3725

    1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine

    A flaw has been found in 1024-lab/lab1024 SmartAdmin up to 3.29. Affected by this issue is the function freemarkerResolverContent of the file sa-base/src/main/java/net/lab1024/sa/base/module/support/mail/MailService.java of the component FreeMarker Template H…

    1024-lab lab1024 SmartAdmin SmartAdmin