Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/02/09 8:53 p.m.53 views

CVE-2026-25878 FroshAdminer Adminer UI is accessible without admin session

FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route /admin/adminer was accessible without Shopware admin authentication. The route was configured with authrequired=false and performed no session validation, exposing the Adminer UI to unauthenticated users...

6.9CVSS0.00376EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/09 8:53 p.m.7 views

CVE-2026-25878 FroshAdminer Adminer UI is accessible without admin session

FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route /admin/adminer was accessible without Shopware admin authentication. The route was configured with authrequired=false and performed no session validation, exposing the Adminer UI to unauthenticated users...

6.9CVSS5.5AI score0.00376EPSS
SaveExploits0References3
Rows per page
Query Builder