CVE-2026-119429

A flaw was found in phpMyAdmin. An authenticated remote attacker can disable two-factor authentication 2FA on an account by submitting a configuration update request without being prompted for password re-verification. An attacker with access to an active session can exploit this issue to remove...