1024-lab

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 9
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    5
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-110117

    SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController

    Last Modified: Oct 13, 2026
    Published: Oct 13, 2026

    CVE-2026-108923

    1024-lab smart-admin Support Config Query queryByKey access control

    Last Modified: Oct 13, 2026
    Published: Oct 12, 2026

    CVE-2026-88619

    Missing Authorization in 1024‑lab SmartAdmin Scheduled‑Job Management

    Last Modified: Sep 20, 2026
    Published: Sep 15, 2026

    CVE-2026-88618

    1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code.

    Last Modified: Sep 27, 2026
    Published: Sep 15, 2026

    CVE-2026-88620

    SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enforce the required function-level permission or data-scope authorization, allowing an authenticated low-privileged employee to retrieve employee records belonging to other departments and users

    Last Modified: Sep 22, 2026
    Published: Sep 15, 2026
    Items Per Page