CVE-2026-110117Medium 6.5SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController0.3%
CVE-2026-108923Medium 6.31024-lab smart-admin Support Config Query queryByKey access control0.2%
CVE-2026-7468High 7.31024-lab smart-admin Demo Site index.html access control0.4%
CVE-2026-3725Medium 6.31024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine0.5%
CVE-2026-3721Low 3.51024-lab/lab1024 SmartAdmin Help Documentation HelpDocAddForm.java cross site scripting0.3%
CVE-2026-3720Low 3.51024-lab/lab1024 SmartAdmin Notice notice-form-drawer.vue cross site scripting0.3%