Vvrana

Products

Exploited and recent CVEs

• CVE-2021-21311 High 7.2 Exploited SSRF in adminer 98.5%
• CVE-2026-109347 High 7.2 Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass 0.9%
• CVE-2026-100698 Medium 5.8 Adminer before 6.0.2 Privileged-Port SSRF via host_port Regex 0.3%
• CVE-2026-100697 High 8.6 Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver 0.4%
• CVE-2026-100696 Medium 5.8 Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver 0.4%
• CVE-2026-100695 Medium 6.1 Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE 0.3%
• CVE-2026-56706 Medium 6.8 Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking 0.4%
• CVE-2026-56705 Critical 9.8 Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection 0.9%
• CVE-2026-56704 Medium 6.1 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String 0.3%
• CVE-2026-56703 High 7.2 Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO 1.2%
• CVE-2026-56702 High 8.8 Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload 0.6%
• CVE-2026-34968 High 8.1 Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop 0.5%
• CVE-2026-34967 Medium 5.4 Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write 0.3%
• CVE-2026-34964 Medium 5.8 Adminer before 5.5.0 SSRF via PDO DSN Injection 0.4%
• CVE-2026-34959 Medium 4.7 Adminer before 5.5.0 Open Redirect via X-Forwarded-Prefix 0.3%
• CVE-2026-16434 Low 2.3 Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass 0.4%
• CVE-2026-63771 High 7.1 Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header 0.4%
• CVE-2026-25892 High 7.5 Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint 1.7%
• CVE-2021-29625 High 7.5 XSS in doc_link 9.6%