High severity7.3NVD Advisory· Published May 28, 2026· Updated May 29, 2026

CVE-2026-30760

Description

An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sb Materialadmin/Webreferences
Drupal/Material Adminllm-fuzzy
Range: <1.1.6

Patches

Vulnerability mechanics

References

gist.github.com/ng-dst/450b698433f628990921f1e5ab46ff8cnvd
gist.github.com/ng-dst/ca6663a4107fd39eaba1be2cb1d52b51nvd
github.com/SB-MaterialAdmin/Web/issues/374nvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000