{"id":"CVE-2026-71622","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-71622","summary":"SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component","details":"SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component","published":"2026-09-04T20:17:26.053","modified":"2026-09-09T20:20:22.130","cvss":{"score":7.4,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://colorful-quill-4fe.notion.site/CVE-2026-71622-ApiAdmin-v5-0-1-sql-injection-37fe5670300c809b86e1ec773b6fda4d"},{"type":"WEB","url":"https://colorful-quill-4fe.notion.site/CVE-2026-71622-ApiAdmin-v5-0-1-sql-injection-37fe5670300c809b86e1ec773b6fda4d"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-09-09T20:20:22.130"}}