CVE-2026-51775

ANALYSIS PENDING

Fastadmin 1.6.1.20250430 - Remote Code Execution via SQL Injection in Backend.php Controller

Title source: llm

Description

SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component

References (1)

Core 1

Core References

https://gitee.com/Tor443/security-advisory/blob/master/README.md

Scores

EPSS 0.0014

EPSS Percentile 4.0%

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

Details

Status published

Published Aug 03, 2026

Tracked Since Aug 04, 2026