Threats affecting pkg:github/sb-materialadmin/Web

CVE-2026-30761 is an arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6. This flaw allows attackers to upload crafted image files that can lead to arbitrary code execution. The vulnerability has a CVSS 3.1 base score of 7.3, indicating a high severity level. No patch or official remediation guidance is currently available, and there are no known exploits in the wild at this time.

CVE-2026-30760 is a high-severity vulnerability in SourceBans Material Admin versions before 1.1.6. It allows attackers to manipulate arbitrary user data in the web application by sending crafted XAJAX calls. The vulnerability has a CVSS score of 7.3, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently confirmed. There are no known exploits in the wild at this time.