CVE-2026-88617

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-09-15

Last updated on: 2026-09-22

Assigner: MITRE

Description

SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a remote attacker to escalate privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-22

Generated

2026-10-19

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-88617

EUVD

EUVD-2026-78624

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	n/a	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

CVE-2026-88617 is an authorization flaw in SmartAdmin v3.30.0 where the super_password configuration value is exposed to low-privileged authenticated employees through the endpoint /support/config/queryByKey. This allows an attacker with knowledge of an administrator's login name to authenticate as that administrator.

Detection Guidance

Check if the endpoint /support/config/queryByKey is accessible without proper authorization. Use tools like curl to query the endpoint: curl -X GET http://<target>/support/config/queryByKey?key=super_password. If it returns the super_password value without requiring high privileges, the system is vulnerable.

Impact Analysis

An attacker could gain administrator-level access by exploiting this vulnerability, potentially leading to unauthorized system control, data breaches, or further network compromise. The attack requires low-privileged employee access or knowledge of an administrator's login name.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements such as GDPR (data protection) and HIPAA (health information security). Organizations using SmartAdmin v3.30.0 may face regulatory penalties and reputational damage.

Mitigation Strategies

Restrict access to the /support/config/queryByKey endpoint to authorized administrators only. Remove the super_password configuration value and replace it with individual user authentication. Rotate the exposed super_password immediately if it was compromised. Ensure all login paths enforce email verification code checks.

Hi! I’m here to help you understand CVE-2026-88617. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70