GHSA-5m2g-4cf6-c3rg
High · 7.3CVSS
7.3
EPSS
—
Published
Feb 22, 2026
CISA due date
—
The record
funadmin has Incorrect Privilege Assignment in its Configuration Handler
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | funadmin/funadmin | 0 | No fix |
Related vulnerabilities
- CVE-2026-2896 A weakness has been identified in funadmin up to 7.1.0-rc4. Same vulnerability
- GHSA-gcxp-xg77-798j funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService… Also affects funadmin/funadmin
- GHSA-rfh7-7v27-6p9r funadmin: XSS through Value argument in Backend Interface component Also affects funadmin/funadmin
- CVE-2026-2897 A security vulnerability has been detected in funadmin up to 7.1.0-rc4. Also affects funadmin/funadmin
- CVE-2026-2898 A vulnerability was detected in funadmin up to 7.1.0-rc4. Also affects funadmin/funadmin
- GHSA-8hhx-xq9j-xwfj funadmin exposes sensitive information via getMember function Also affects funadmin/funadmin
- GHSA-fmr2-m7gc-577w funadmin has Weak Password Recovery Mechanism for Forgotten Password Also affects funadmin/funadmin
- CVE-2026-2894 A vulnerability was identified in funadmin up to 7.1.0-rc4. Also affects funadmin/funadmin