← Back to search

CVE-2026-109892

9.8 CRITICAL

Published 2026-10-15 · Updated 2026-10-15

AI risk analysis

Summary
This vulnerability allows unauthenticated users to escalate privileges and gain administrative access to the Frontend Admin system, potentially leading to full control over the affected application and its data.
Exploitability
Exploitation is likely straightforward with no special preconditions required, as the vulnerability affects the frontend admin component and allows privilege escalation without authentication.
Blast radius
If exploited, this could allow attackers to gain complete administrative control over the Frontend Admin system, potentially affecting all user data and functionality within that application.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to version 3.29.14 or later to remediate this privilege assignment vulnerability.
privilege-escalationfrontendadmin-access

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-266

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.