CVE-2026-36724

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module_task:job:update permission to cause a Denial of Service (DoS) via manipulating the func field of scheduled tasks.

Published 2026-06-09. Last modified 2026-07-23.