PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-36724 FastapiAdmin CVE debrief

CVE-2026-36724 is a medium-severity vulnerability in FastapiAdmin v2.2.0. An uncaught exception in the /application/job/update/{id} endpoint allows authenticated attackers with the module_task:job:update permission to cause a Denial of Service (DoS) via manipulating the func field of scheduled tasks. The vulnerability has a CVSS score of 6.5 and is classified as CWE-400.

Vendor
FastapiAdmin
Product
FastapiAdmin
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-10
Advisory published
2026-06-09
Advisory updated
2026-06-10

Who should care

Users of FastapiAdmin v2.2.0, particularly those with the module_task:job:update permission, should be aware of this vulnerability and take necessary precautions.

Technical summary

The vulnerability exists in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0. An uncaught exception allows authenticated attackers to cause a Denial of Service (DoS) by manipulating the func field of scheduled tasks.

Defensive priority

MEDIUM

Recommended defensive actions

  • Update to a patched version of FastapiAdmin, if available.
  • Restrict access to the /application/job/update/{id} endpoint to only necessary users.
  • Monitor for suspicious activity on the /application/job/update/{id} endpoint.

Evidence notes

The vulnerability is confirmed by the CVE record and NVD detail pages. [resourceLinkAnnotations:cve-org,nvd]

Sources and references

Verified primary and authoritative sources

  • CVE-2026-36724 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-36724

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-36724 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-36724

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.