CVE-2026-25892
1 advisory.
Packagist/vrana/adminer CVE-2026-25892: high 7.5, EPSS 2.07%
Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint
Action: Upgrade vrana/adminer to 5.4.2 or later.
composer require vrana/adminer:5.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.2 | 5.4.2 | - |
Fixed versions
| 5.4.2 |
Sources
- osv: GHSA-q4f2-39gr-45jh
- https://github.com/vrana/adminer/security/advisories/GHSA-q4f2-39gr-45jh
- https://nvd.nist.gov/vuln/detail/CVE-2026-25892
- https://github.com/vrana/adminer/commit/21d3a3150388677b18647d68aec93b7850e457d3
- https://github.com/vrana/adminer
- https://github.com/vrana/adminer/releases/tag/v5.4.2
CVE-2026-25892 · published · modified · JSON