Veille CVE

Vendredi 16 octobre 2026

1 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « build-admin buildadmin » ✕
  1. CVE-2026-111648 2.7 Faible

    build-admin buildadmin

    BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile and motto fields, including a super administrator's email and mobile.