CVE WATCH / VULNERABILITY DETAIL
CVE-2026-119428
LOWCVSS 3.7NVD feed
Published 30 October 2026 · tracked since 31 October 2026
Description
phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound connections via setup/validate.php, which lacks the setup-disabled guard. Attackers can POST attacker-chosen host and port values reaching Validator::testDBConnecti
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2015-20130 MEDIUM 6.1
- CVE-2026-111487
- CVE-2010-20125 HIGH 7.5
- CVE-2026-119577 MEDIUM 6.8
- CVE-2026-119578 HIGH 7.8
- CVE-2026-119572 HIGH 8.7
- CVE-2026-119573 MEDIUM 4.4
- CVE-2026-115683 MEDIUM 6.8
- CVE-2026-112348 MEDIUM 6.5
- CVE-2026-112347 HIGH 7.6