CVE WATCH / VULNERABILITY DETAIL
CVE-2026-119562
MEDIUMCVSS 4.2NVD feed
Published 30 October 2026 · tracked since 31 October 2026
Description
phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying unescaped col_extra and col_attribute values to /database/central-columns. Attackers can inject SQL into pma__central_columns INSERT and UPDATE queries run with controluser pri
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2015-20130 MEDIUM 6.1
- CVE-2026-111487
- CVE-2010-20125 HIGH 7.5
- CVE-2026-119577 MEDIUM 6.8
- CVE-2026-119578 HIGH 7.8
- CVE-2026-119572 HIGH 8.7
- CVE-2026-119573 MEDIUM 4.4
- CVE-2026-115683 MEDIUM 6.8
- CVE-2026-112348 MEDIUM 6.5
- CVE-2026-112347 HIGH 7.6