Advisories · Technology

build-admin BuildAdmin.

Every CVE that names build-admin BuildAdmin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-127092 CVE record

CVSS 5.3 Medium

BuildAdmin 1.0.1 through 2.3.9 Stored XSS via X-Rewrite-URL in Admin Log
- build-admin BuildAdmin
- Cross-site scripting (XSS)
Not analysed yet 13 Nov 2026
CVE-2026-111648 CVE record

CVSS 5.1 Medium

BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter
- build-admin buildadmin
- Broken access control
Not analysed yet 16 Oct 2026