CVE-2026-100697

Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin plugins/drivers/clickhouse.php, rewritten in 6.0.0 is loaded, is vulnerable to pre-authentication server-side request forgery. An unauthenticated attacker can submit authdriver=clickhouse with authserver set to an arbitrary U...

PT-2026-99368

Name of the Vulnerable Software and Affected Versions Adminer versions 6.0.0 through 6.0.1 Description Pre-authentication server-side request forgery occurs when the official ClickHouse driver plugin plugins/drivers/clickhouse.php is loaded. An unauthenticated attacker can provide...