Vrana Adminer vulnerabilities

• vrana adminer Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass CVE-2026-109347 Fix available 8.6 HighOctober 12, 2026
• vrana adminer Adminer before 6.0.2 Privileged-Port SSRF via host_port Regex CVE-2026-100698 Fix available 6.9 MediumSeptember 26, 2026
• vrana adminer Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver CVE-2026-100697 Fix available 5.3 MediumSeptember 26, 2026
• vrana adminer Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver CVE-2026-100696 Fix available 6.9 MediumSeptember 26, 2026
• vrana adminer Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE CVE-2026-100695 Fix available 5.3 MediumSeptember 26, 2026
• vrana adminer Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking CVE-2026-56706 Fix available 6.1 MediumAugust 25, 2026
• vrana adminer Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection CVE-2026-56705 Public exploitFix available 9.3 CriticalAugust 25, 2026
• vrana adminer Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String CVE-2026-56704 Fix available 5.3 MediumAugust 25, 2026
• vrana adminer Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO CVE-2026-56703 Fix available 8.6 HighAugust 25, 2026
• vrana adminer Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload CVE-2026-56702 Fix available 7.1 HighAugust 25, 2026
• vrana adminer Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop CVE-2026-34968 Fix available 7.2 HighAugust 25, 2026
• vrana adminer Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write CVE-2026-34967 Fix available 5.3 MediumAugust 25, 2026
• vrana adminer Adminer before 5.5.0 SSRF via PDO DSN Injection CVE-2026-34964 Fix available 6.9 MediumAugust 25, 2026
• vrana adminer Adminer before 5.5.0 Open Redirect via X-Forwarded-Prefix CVE-2026-34959 Fix available 5.3 MediumAugust 25, 2026
• vrana adminer Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass CVE-2026-16434 Fix available 2.3 LowAugust 25, 2026
• adminer Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability CVE-2026-15686 Fix available 7.2 HighAugust 20, 2026
• vrana adminer Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header CVE-2026-63771 Fix available 6.0 MediumJuly 20, 2026
• adminer Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint CVE-2026-25892 Fix available 7.5 HighFebruary 9, 2026
• adminer, adminerevo +1 more Adminer and AdminerEvo SSRF CVE-2023-45195 Fix available 6.9 MediumJune 24, 2024
• adminer, adminerevo +1 more Adminer and AdminerEvo denial of service via HTTP redirect CVE-2023-45196 Fix available 6.9 MediumJune 24, 2024
• adminer, adminerevo +1 more Adminer and AdminerEvo vulnerable to directory traversal and file upload CVE-2023-45197 9.2 CriticalJune 21, 2024
• adminer XSS in doc_link CVE-2021-29625 Fix available 7.5 HighMay 19, 2021
• adminer, debian linux +1 more SSRF in adminer CVE-2021-21311 In KEVPublic exploitFix available EPSS 98.5% 7.2 HighFebruary 11, 2021