Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/09/26 1:23 p.m.•51 views

CVE-2026-100698 Adminer before 6.0.2 Privileged-Port SSRF via host_port Regex

Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the hostport function in adminer/include/functions.inc.php. The port capture group requires pure digits anchored to the end of the string, so any server value with a non-digit tail fails the regex and falls back to returni...

6.9CVSS0.00277EPSS
SaveExploits0References2
Rows per page
Query Builder