All 7 CVE vulnerabilities found in FastApiAdmin, with AI-generated Chinese analysis, references, and POCs.
Vendor: n/a
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111641 | FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints CWE-306 | 9.8 | Critical | 2026-10-16 |
| CVE-2026-111642 | FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation CWE-321 | 8.8 | High | 2026-10-16 |
| CVE-2026-2979 | FastApiAdmin Scheduled Task API controller.py user_avatar_upload_controller unrestricted upload CWE-434 | 6.3 | Medium | 2026-02-23 |
| CVE-2026-2978 | FastApiAdmin Scheduled Task API controller.py upload_file_controller unrestricted upload CWE-434 | 6.3 | Medium | 2026-02-23 |
| CVE-2026-2977 | FastApiAdmin Scheduled Task API controller.py upload_controller unrestricted upload CWE-434 | 6.3 | Medium | 2026-02-23 |
| CVE-2026-2976 | FastApiAdmin Download Endpoint controller.py download_controller information disclosure CWE-200 | 4.3 | Medium | 2026-02-23 |
| CVE-2026-2975 | FastApiAdmin Custom Documentation Endpoint init_app.py reset_api_docs information disclosure CWE-200 | 5.3 | Medium | 2026-02-23 |
All 7 known CVE vulnerabilities affecting FastApiAdmin with full Chinese analysis, references, and POCs where available.