CVE-2026-7468: 1024-lab smart-admin Demo Site index.html access control
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7468?
CVE-2026-7468 is classified as a security vulnerability that results in improper access controls.
How do I fix CVE-2026-7468?
To fix CVE-2026-7468, upgrade the 1024-lab smart-admin software to version 3.30.1 or later.
What component is affected by CVE-2026-7468?
CVE-2026-7468 affects the Demo Site component found in the file /smart-admin-api/druid/index.html.
What actions can be exploited in CVE-2026-7468?
CVE-2026-7468 allows an attacker to manipulate access controls leading to unauthorized access.
Which versions of smart-admin are vulnerable to CVE-2026-7468?
Versions of 1024-lab smart-admin up to and including 3.30.0 are affected by CVE-2026-7468.