buildadmin vulnerabilities

CVEs whose affected-version data names the buildadmin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111648Low· 2.7

today

BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter

BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/e…

▾ Sunlitbuild-admin · buildadminvia CVEORG