Skip to content
OpenAdvisories

Product · build-admin

buildadmin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2026-111648

    BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter

    BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can ove…

    build-admin buildadmin