Packagist/frosh/adminer-platform CVE-2026-25878: medium 5.3, EPSS 0.41%

FroshAdminer Adminer UI is accessible without admin session

Action: Upgrade frosh/adminer-platform to 2.2.1 or later.

composer require frosh/adminer-platform:2.2.1

Affected

Fixed versions

Sources

• osv: GHSA-f339-246p-wwjp
• nvd: CVE-2026-25878
• https://github.com/FriendsOfShopware/FroshPlatformAdminer/security/advisories/GHSA-f339-246p-wwjp
• https://github.com/FriendsOfShopware/FroshPlatformAdminer/commit/c4dd6c3462af178b3a7d146d3c651c2c253e902b
• https://github.com/FriendsOfShopware/FroshPlatformAdminer
• https://github.com/FriendsOfShopware/FroshPlatformAdminer/releases/tag/2.2.1

CVE-2026-25878 · published 2026-02-10T00:22:05Z · modified 2026-02-10T00:41:26.002692Z · JSON