CVE-2026-102247: FastAdmin Database Management database.php unnecessary privileges

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-29 · updated 2026-09-29
Weakness: CWE-250

Description

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit is now public and may be used.

Affected products

FastAdmin: 1.6.1.20250430, 1.6.5.20260602

References

https://github.com/baguette168/CVE/issues/2
https://vuldb.com/cve/CVE-2026-102247
https://vuldb.com/submit/933377
https://vuldb.com/vuln/411145
https://vuldb.com/vuln/411145/cti

Get alerted when CVE-2026-102247 or the next vulnerability affects your stack