CVE-2026-100697

creationtimestamp| type| source ---|---|--- 2026-09-27 01:02:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhlzrfndd2g...

CVE-2026-100697

Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin plugins/drivers/clickhouse.php, rewritten in 6.0.0 is loaded, is vulnerable to pre-authentication server-side request forgery. An unauthenticated attacker can submit authdriver=clickhouse with authserver set to an arbitrary U...