CVE-2026-102247— FastAdmin Database Management database.php unnecessary privileges
Quick assessment
Affected
n/a FastAdmin
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack m
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102247
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FastAdmin Database Management database.php unnecessary privileges
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit is now public and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
带着不必要的权限执行
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | FastAdmin | 1.6.1.20250430 |
cpe:2.3:a:fastadmin:fastadmin:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-102247
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102247
请登录查看更多情报信息。
News Coverage for CVE-2026-102247 (1)
Other References for CVE-2026-102247 (4)
-
-
https://vuldb.com/cve/CVE-2026-102247 third-party-advisory
-
-
https://vuldb.com/submit/933377 third-party-advisory
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-102248
Rebuild Login Endpoint login improper authentication -
CVE-2026-101083
PMWeb encryptionhelper.dll information disclosure -
CVE-2026-101082
PMWeb downloader.aspx path traversal -
CVE-2026-101070
dbgate Files Endpoint runners.js files path traversal -
CVE-2026-101069
dbgate Export databaseConnections.js exportModelSql path tra
Same weakness: CWE-250
-
CVE-2026-88808
Fleet agent copies downstream resources with cluster-admin p -
CVE-2026-87899
cPanel提权漏洞：远程用户可获Root权限执行代码 -
CVE-2026-19087
IBM Financial Transaction Manager (FTM) is Impacted by Multi -
CVE-2026-84787
Privilege Escalation vulnerability -
CVE-2026-92574
Cri-o: cri-o checkpoint restore bypasses destination securit
V. Comments for CVE-2026-102247
No comments yet