PatchTheCVEowl admin vulnerabilities and fixes
Recent CVEs affecting owl admin, with upgrade or downgrade steps. 1 tracked.
Also searched as: owladmin.
owl admin has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-13. Highest priority: CVE-2025-28057 (score 39/100).
- CVE-2025-28057 HIGH 7.2 UPGRADE owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order.
FAQ
How do I fix owl admin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is owl admin being exploited right now?
None of the tracked owl admin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which owl admin CVE should I patch first?
CVE-2025-28057 currently ranks highest (39/100): owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order..