CVE-2026-51775

CriticalCVSS 9.8

Published: 03/08/2026(UTC)Updated: 06/08/2026(UTC)Translated: 04/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to execute arbitrary code via the application/common/controller/Backend.php component.

Risk Assessment

An attacker can gain unauthorized access to the database and execute arbitrary SQL commands, potentially leading to data leakage or application takeover.

Recommendation

It is recommended to update Fastadmin to the latest version containing a fix and apply appropriate SQL injection protection mechanisms.

Original NVD description (English source)

SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component