Badaso vulnerabilities

2 known vulnerabilities in Badaso from Uasoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Badaso: Incorrect Privilege Assignment

  CVE-2026-19376Aug 10, 2026Uasoft

  A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The manipulation leads to permission issues. It is possible to initiate the attack

• 8.1 High severity

  badaso: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2025-15398Dec 31, 2025Uasoft

  A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAuthController.php of the component Token Handler. Such manipulation leads to weak password recovery. The attack