vrana adminer vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 202617

Known exploitedNewest addition to KEV first

• CVE-2021-21311

  SSRF in adminer

  vrana · adminer

  ExploitedHigh7.2

Newest CVEs

• CVE-2026-109347

  Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass

  vrana · adminer

  High8.6
• CVE-2026-100698

  Adminer before 6.0.2 Privileged-Port SSRF via host_port Regex

  vrana · adminer

  Medium6.9
• CVE-2026-100697

  Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver

  vrana · adminer

  Medium5.3
• CVE-2026-100696

  Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver

  vrana · adminer

  Medium6.9
• CVE-2026-100695

  Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE

  vrana · adminer

  Medium5.3
• CVE-2026-56706

  Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking

  vrana · adminer

  Medium6.1
• CVE-2026-56705

  Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection

  vrana · adminer

  Critical9.3
• CVE-2026-56704

  Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

  vrana · adminer

  Medium5.3
• CVE-2026-56703

  Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO

  vrana · adminer

  High8.6
• CVE-2026-56702

  Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload

  vrana · adminer

  High7.1