Threats tagged 'ghsa-m623-j3j4-q8vr'

A security vulnerability identified as CVE-2026-7468 affects 1024-lab smart-admin versions up to 3.30.0. The flaw involves improper access controls in an unspecified function within the /smart-admin-api/druid/index.html file of the Demo Site component. The vulnerability can be exploited remotely without authentication. Public disclosure of the exploit exists, but no official response or patch has been provided by the vendor.