InfraGuard

Adminer 5.4 취약점

Adminer 5.4 라인에 영향을 주는 알려진 CVE 는 16건입니다.

9.3 최고 CVSS

수정 버전

5.4.3

5.4 에 영향을 주는 CVE

CVE 제목 CVSS 악용 EPSS 공개일
CVE-2026-56705 Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection 9.3 — 2026-08-25
CVE-2026-56703 Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO 8.6 — 2026-08-25
CVE-2026-109347 Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass 8.6 — 2026-10-13
CVE-2026-34968 Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop 7.2 — 2026-08-25
CVE-2026-56702 Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload 7.1 — 2026-08-25
CVE-2026-100696 Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver 6.9 — 2026-09-26
CVE-2026-34964 Adminer before 5.5.0 SSRF via PDO DSN Injection 6.9 — 2026-08-25
CVE-2026-100698 Adminer before 6.0.2 Privileged-Port SSRF via host_port Regex 6.9 — 2026-09-26
CVE-2026-56706 Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking 6.1 — 2026-08-25
CVE-2026-63771 Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header 6.0 — 2026-07-21
CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String 5.3 — 2026-08-25
CVE-2026-34959 Adminer before 5.5.0 Open Redirect via X-Forwarded-Prefix 5.3 — 2026-08-25
CVE-2026-34967 Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write 5.3 — 2026-08-25
CVE-2026-100695 Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE 5.3 — 2026-09-26
CVE-2026-100697 Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver 5.3 — 2026-09-26
CVE-2026-16434 Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass 2.3 — 2026-08-25

내 서버의 버전을 직접 추적하세요

InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.

주간 악용 취약점 다이제스트

셀프호스팅 서버에 중요한 KEV 추가분을 일주일에 한 번 보내드립니다. 다른 메일은 보내지 않습니다.

데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).