CVE-2026-88424

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter(). This vulnerability allows attackers to access sensitive database information via crafted SQL statements.

Published 2026-10-05. Last modified 2026-10-06.