https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T18:40:12.743196+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111641 CVE-2026-111641 — FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints 2026-10-17T18:40:12.744515+00:00

Affected: FastapiAdmin

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a superuser auto-login token, and exchange it for a JWT session to gain full administrative control.