CVE-2026-88397 | ApiAdmin up to 5.0 User List Endpoint /admin/User/getUsers gid sql injection

October 5, 2026 Yanac

A vulnerability described as critical has been identified in ApiAdmin up to 5.0. This impacts an unknown function of the file /admin/User/getUsers of the component User List Endpoint. Such manipulation of the argument gid leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-88397. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More