CVE-2026-108923 | 1024-lab smart-admin up to 3.30.0 Support Config Query queryByKey configKey access control (Issue 137)

October 11, 2026 Yanac

A vulnerability categorized as critical has been discovered in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the component Support Config Query. Executing a manipulation of the argument configKey can lead to improper access controls.

This vulnerability is handled as CVE-2026-108923. The attack can be executed remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More