Read the docs

build-admin

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

build-admin records in CISA KEV

No build-admin vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-75434 CVE-2026-111648 · GHSA-mrm7-fvcm-h52j

Insecure direct object reference in BuildAdmin admin profile editing

Priority MEDIUM 56

BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00381 Published 2026-10-16 No fix listed CWE-639
Open these records in search →