ZDI-CAN-28201 HIGH 7.2 Upcoming Mar 06, 2026

Adminer

Adminer is a popular web-based database management tool that allows remote administration of databases. This vulnerability has a CVSS score of 7.2 and requires high-level privileges to exploit, but once authenticated, an attacker can achieve complete compromise including confidentiality, integrity, and availability breaches with no user interaction needed. Security teams should monitor for any patches released before the July 4, 2026 deadline and prioritize updates for internet-facing Adminer instances, particularly in environments where high-privilege accounts may be compromised.

Advisory Details
Researcher 0daystolive (Sorcery Ltd)
Reported March 06, 2026
Deadline July 04, 2026 79d
CVSS Vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy