CVE-2026-88397 PUBLISHED

Assigner: mitre
Reserved: 10.09.2026 Published: 05.10.2026 Updated: 05.10.2026

ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter.

Product Status

Vendor n/a
Product n/a
Versions
  • Version n/a is affected

References

Problem Types

  • n/a text