Product by Open Source

    Phpmyadmin

    7 known vulnerabilities in Phpmyadmin (Open Source), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Phpmyadmin (Open Source)
    HighCVE-2026-119426

    phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql

    also in 1 other product

    		8.8
    HighCVE-2026-119427

    phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting

    also in 1 other product

    		8.8
    HighCVE-2026-119562

    phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute

    also in 1 other product

    		8.8
    HighCVE-2026-119561

    phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer

    also in 1 other product

    		8.1
    MediumCVE-2026-119428

    phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled

    also in 1 other product

    		5.8
    MediumCVE-2026-119429

    phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set

    also in 1 other product

    		4.3
    MediumCVE-2026-119563

    phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name

    also in 1 other product

    		5.4

    All products by Open Source