PatchTheCVEowladmin vulnerabilities
Recent CVEs affecting owladmin products. 1 tracked.
owladmin has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-13. Highest priority: CVE-2025-28057 (score 39/100).
- CVE-2025-28057 HIGH 7.2 UPGRADE owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order.
FAQ
How do I fix owladmin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is owladmin being exploited right now?
None of the tracked owladmin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which owladmin CVE should I patch first?
CVE-2025-28057 currently ranks highest (39/100): owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order..