CyberSecBulletin

1024-lab vulnerabilities

We track 2 vulnerabilities in 1024-lab products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 30, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest 1024-lab vulnerabilities

  • 7.3 High severity

    smart-admin: Incorrect Privilege Assignment

    CVE-2026-74681024-lab

    A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be in

  • 8.8 High severity

    SmartAdmin: Incomplete Filtering of Special Elements

    CVE-2026-37251024-lab

    A flaw has been found in 1024-lab/lab1024 SmartAdmin up to 3.29. Affected by this issue is the function freemarkerResolverContent of the file sa-base/src/main/java/net/lab1024/sa/base/module/support/mail/MailService.java of the component FreeMarker Template Ha