Executive brief
funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function
Affected products
- Packagist funadmin/funadmin
Junglewise Threat Intelligence
CVE-2026-2898: funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function
CVE-2026-2898 · Severity: low · CVSS 3.1 · Published 2026-02-22
Technologies: funadmin/funadmin (Packagist). Vendors: Packagist.
Related threats
- Funadmin has an Improper Access Control Issue
- funadmin: XSS through Value argument in Backend Interface component
- funadmin exposes sensitive information via getMember function
- funadmin has Weak Password Recovery Mechanism for Forgotten Password
- funadmin has Incorrect Privilege Assignment in its Configuration Handler