CVE-2026-88617

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a remote attacker to escalate privileges.

Published 2026-09-15. Last modified 2026-09-22.