PatchTheCVEfunadmin vulnerabilities
Recent CVEs affecting funadmin products. 16 tracked.
funadmin has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-02-22. Highest priority: CVE-2026-2896 (score 42/100).
- CVE-2026-2898 MEDIUM 5.5 UPGRADE A vulnerability was detected in funadmin up to 7.1.0-rc4
- CVE-2026-2897 LOW 2.4 UPGRADE A security vulnerability has been detected in funadmin up to 7.1.0-rc4
- CVE-2026-2896 HIGH 7.3 UPGRADE A weakness has been identified in funadmin up to 7.1.0-rc4
- CVE-2026-2895 LOW 3.7 UPGRADE A security flaw has been discovered in funadmin up to 7.1.0-rc4
- CVE-2026-2894 MEDIUM 5.3 UPGRADE A vulnerability was identified in funadmin up to 7.1.0-rc4
- CVE-2024-48231 HIGH 7.2 DOWNGRADE Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\c
- CVE-2024-48230 HIGH 7.2 DOWNGRADE funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\co
- CVE-2024-48229 HIGH 7.2 DOWNGRADE funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.
- CVE-2024-48228 MEDIUM 6.1 DOWNGRADE An issue was found in funadmin 5.0.2
- CVE-2024-48227 MEDIUM 4.9 DOWNGRADE Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denia
- CVE-2024-48226 HIGH 7.2 DOWNGRADE Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.
- CVE-2024-48225 MEDIUM 6.5 DOWNGRADE Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.
- CVE-2024-48224 MEDIUM 4.9 DOWNGRADE Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.
- CVE-2024-48223 HIGH 7.2 DOWNGRADE Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.
- CVE-2024-48222 HIGH 7.2 DOWNGRADE Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.
- CVE-2024-48218 HIGH 7.2 DOWNGRADE Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.
FAQ
How do I fix funadmin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is funadmin being exploited right now?
None of the tracked funadmin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which funadmin CVE should I patch first?
CVE-2026-2896 currently ranks highest (42/100): A weakness has been identified in funadmin up to 7.1.0-rc4.