CVE-2026-100695Proof of concept (PoC) published · CISA
Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE
CVSS score
5.3
EPSS probability
%0.3
Risk score
0.0
Published
23 d ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
No verified news item has been matched to this CVE yet.
Similar Vulnerabilities
8.6
CVE-2026-56703Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO
Patch status unknownEPSS %1
9.3
CVE-2026-56705Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection
Patch status unknown Public Exploits:2EPSS %1
8.6
CVE-2026-109347Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass
Patch status unknownEPSS %1
7.1
CVE-2026-56702Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload
Patch status unknownEPSS %1
7.2
CVE-2026-34968Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop
Patch status unknownEPSS %1
6.9
CVE-2026-34964Adminer before 5.5.0 SSRF via PDO DSN Injection
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-100695"